Nearly all companies have (or should have) Commercial General Liability (CGL) policies. These tried-and-true policies protect against physical injury or damage to property in the event of an "occurrence." Accordingly, when breaches occur, policyholders naturally turn to their CGL policy and expect coverage. Insurers, however, have taken the position that CGL policies do not cover cyber-attacks — and the courts tend to agree.