Cyber Liability Insurance for Churches

Your church handles sensitive data every week

Churches collect and store member addresses, phone numbers, email addresses, donation records, credit card information through online giving, employee social security numbers, and background check results. A data breach exposes all of this — and your church is responsible for notifying every affected person.

• Online giving platforms. Every church that accepts online donations processes credit card and bank account information. If your giving platform is compromised, your church may be liable for PCI compliance fines and member notification costs.
• Member databases. Church management software stores names, addresses, family relationships, giving history, and sometimes counseling notes. This is exactly the kind of data that attackers target.
• Ransomware attacks. Ransomware locks your files and demands payment to unlock them. Churches are increasingly targeted because they often run older systems with fewer security measures. A single ransomware attack can shut down your operations for days or weeks.
• Phishing attacks targeting church staff. Church staff receive emails that look like they come from pastors, board members, or vendors — asking for wire transfers, login credentials, or sensitive files. Business email compromise is one of the most common cyber threats to churches.
• Donor financial information. Churches that process donations, tuition payments, or event registrations handle financial data that requires protection. A breach of donor records damages both your finances and the trust your congregation has placed in your leadership.