Are criminal cyberattacks increasing in sophistication and frequency? Yes.

Is every company, in every industry, that collects or stores sensitive customer, employee, or business data vulnerable to cyberattacks? Yes.

Has there been an increase in cyberattacks that interrupt a company’s ability to conduct business? Yes.

Can a victim of a cyberattack, or even a potential victim, also become the target of a government investigation and face fines and other penalties? Yes.

Can these investigations extend to whether a company’s cybersecurity programs are “reasonable,” even with respect to software or products they sell? Yes.

Is there insurance coverage? Maybe.