A recent district court ruling highlights that in the aftermath of a cyberattack, even non-cyberinsurance policies could be required to pay up even if there’s no “direct physical loss.”

Last week a Maryland federal court judge ruled in National Ink and Stitch v. State Auto Property and Casualty Insurance that State Auto Property and Casualty Insurance Co. must cover the cost to replace National Ink and Stitch’s damaged computer systems after a ransomware attack.