The Top 10 Most Overlooked Insurance Coverage Gaps for Small Businesses

Many small business owners assume their Business Owners Policy (BOP) covers “everything.” While a BOP combines important protections like general liability and property coverage, it often leaves major gaps that can create serious financial problems after a claim. As businesses grow, hire employees, expand services, sign contracts, or invest in equipment, their risks evolve quickly — and many owners do not realize their insurance needs have changed too.



From cyberattacks and employee theft to lawsuits that exceed liability limits, some of the biggest insurance exposures are the quiet ones hiding in the background. Below are 10 of the most commonly overlooked coverage gaps small businesses should review before a claim happens.

1. Cyber Liability Insurance

Many small businesses believe cybercriminals only target large corporations. In reality, smaller businesses are often easier targets because they typically have weaker cybersecurity systems and fewer protections in place.

Cyber liability insurance can help cover ransomware attacks, phishing scams, data breaches, stolen customer information, notification costs, legal expenses, and lost income caused by cyber events.

Example:
A local restaurant’s online ordering system gets hacked, exposing hundreds of customer credit card numbers. The business faces forensic investigation costs, customer notifications, legal fees, and lost revenue while systems remain offline.



Important Note:

While some Business Owners Policies (BOPs) may offer limited cyber coverage through endorsements or add-ons, the protection is often very narrow and may not fully cover today’s growing cyber risks. Many small businesses assume their BOP automatically covers cyber incidents, only to discover major exclusions after a claim occurs.

For example, a basic BOP endorsement may provide limited coverage for certain data breaches or notification expenses, but it often does not fully cover ransomware payments, widespread system restoration, cyber extortion, fraudulent wire transfers, phishing scams, regulatory fines, reputational damage, or prolonged business interruption caused by a cyberattack.

Example:
A restaurant falls victim to a phishing email that allows hackers to access its payment processing system and customer credit card information. While the business’s BOP may help with limited notification costs, it may not fully cover ransomware demands, forensic IT investigations, lost income during downtime, or legal expenses from affected customers if standalone cyber liability coverage was never added.

2. Professional Liability / Errors & Omissions (E&O)

General liability insurance included on a BOP does not cover professional mistakes, missed deadlines, negligence claims, or financial harm caused by services or advice. Businesses that provide expertise, recommendations, designs, advice, or specialized services often need Professional Liability / Errors & Omissions (E&O) coverage because general liability insurance typically does not cover financial losses caused by professional mistakes or negligence.

Some common examples include:

Interior designers

Architects

Engineers

Marketing agencies

Insurance agencies

Real estate agents

Accountants & bookkeepers

Consultants & business coaches

IT companies & web designers

Lawyers

Mortgage brokers

Financial advisors

Travel agents

Event planners

Graphic designers

Medical spas & wellness professionals

Property managers

Home inspectors

Photography & videography businesses

Software developers

Example:

An interior design company orders incorrect custom materials for a large renovation project, delaying construction for weeks. The client sues for financial losses tied to the delay and additional labor costs.

3. Business Interruption Insurance

Many businesses insure their building and equipment but forget about lost income after a covered loss. Business interruption insurance helps replace revenue and cover ongoing expenses such as payroll, rent, utilities, and loan payments while operations are temporarily shut down.

Example:

A plumbing company experiences severe water damage after a frozen pipe bursts inside its office and warehouse. The business cannot operate for several weeks while repairs are completed, resulting in lost revenue during its busiest season.

However, many business owners do not realize that standard business interruption coverage typically requires direct physical damage from a covered cause of loss in order for coverage to apply. In other words, there usually must be physical damage to the insured property — such as a fire, burst pipe, wind damage, or similar covered event — before lost income coverage is triggered.

There are some specialized coverages and endorsements that may provide business interruption-related protection without direct physical damage in certain situations, depending on the policy language. Examples can include:

• Cyber business interruption coverage for network outages or ransomware attacks
• Utility services interruption coverage for certain off-premises power outages
• Civil authority coverage if government orders prevent access to the business after nearby damage
• Contingent business interruption coverage tied to supplier or vendor disruptions
• Certain communicable disease or specialty endorsements in limited circumstances

Example:

A restaurant loses power for several days after a major storm damages nearby utility infrastructure. If the business only carries standard business interruption coverage, there may be no coverage if there was no direct physical damage to the restaurant itself. Utility services interruption coverage may help fill this gap, depending on the policy terms.

4. Business Property Coverage & Scheduled Equipment

Businesses often underestimate the value of tools, equipment, inventory, furniture, and specialized machinery. Some high-value equipment may also need to be specifically scheduled on the policy to ensure proper coverage.

Scheduled equipment is especially important for businesses that use expensive mobile tools, specialized machinery, or custom equipment.

While some commercial property policies may provide limited coverage for tools and equipment automatically, the built-in limits are often far too low to fully replace high-value items after a loss.

Without properly scheduling equipment, businesses may face significant out-of-pocket expenses due to coverage sublimits, depreciation, theft restrictions, or limitations for equipment stored off-site, in vehicles, or transported between job locations. Many business owners assume all of their equipment is fully covered until they experience a claim and discover the policy only provides a small fraction of the replacement cost.

Example:

A landscaping company has $80,000 worth of commercial mowers, trailers, and specialized irrigation equipment stolen overnight from a job site. The business assumed everything was covered under its standard property policy, but the policy only included a limited unscheduled tools and equipment sublimit — leaving the company responsible for tens of thousands of dollars in replacement costs.

5. Workers’ Compensation & Misclassified Workers

Many businesses incorrectly assume 1099 contractors automatically eliminate workers’ compensation exposure. However, misclassified workers can create major liability issues if injuries occur.

Workers’ compensation laws vary by state, and improperly classifying workers may lead to uncovered claims, penalties, audits, and lawsuits.

Example:

A painting company hires subcontractors for a large commercial project. One worker falls from scaffolding and suffers serious injuries. After investigation, the worker is determined to function more like an employee than an independent contractor.

In Massachusetts, workers’ compensation laws are especially strict, and many business owners misunderstand who must be covered. Massachusetts generally requires businesses with employees — even part-time employees or family members working for the business — to carry workers’ compensation insurance. Misclassifying workers as independent contractors when they legally function as employees can create major financial and legal exposure.

If a worker is injured and later determined to be an employee rather than a true independent contractor, the business may face uncovered injury claims, stop-work orders, expensive audits, fines, penalties, and potential lawsuits. Massachusetts agencies closely scrutinize worker classification, particularly in industries such as construction, landscaping, painting, food service, and cleaning services where subcontractor relationships are common.

Example:
A Massachusetts painting company hires several “1099 subcontractors” for residential projects. One worker falls from a ladder and suffers serious injuries. During the claim investigation, the worker is determined to meet the legal definition of an employee under Massachusetts law. The business now faces workers’ compensation exposure, penalties, and possible uninsured claim costs because the worker was improperly classified.

Liability lawsuits have become increasingly expensive. A serious accident or injury can easily exceed standard general liability or auto liability limits. Umbrella insurance provides additional protection above underlying policy limits.

Example:

A fishing charter company experiences a boating accident that results in multiple injured passengers. Medical expenses and lawsuits exceed the company’s underlying liability limits.

Without umbrella coverage, businesses may have to pay excess judgments and legal costs out of pocket. This exposure has become increasingly important as businesses across the country face what many in the insurance industry describe as a growing legal system abuse and social inflation problem — where lawsuits, litigation costs, and jury awards continue rising dramatically.

Large settlements and nuclear verdicts are becoming more common, even for small and mid-sized businesses. Attorney advertising, aggressive litigation tactics, rising medical costs, and larger jury sympathy awards have all contributed to liability claims reaching amounts many business owners never expected. A single serious accident can quickly exceed a standard $1 million liability policy limit.

Umbrella and excess liability coverage provide an additional layer of protection above underlying policies such as general liability, commercial auto, and employers liability coverage.

Example:

A landscaping company employee causes a severe auto accident while towing equipment between job sites, resulting in multiple injuries. The lawsuit and medical costs exceed the company’s commercial auto liability limits, forcing the business to rely on its umbrella policy for additional protection.

Some businesses technically carry general liability insurance but still underestimate how quickly legal costs, medical bills, settlements, and attorney fees can add up after a serious claim. This has quietly become one of the biggest coverage gaps affecting small businesses today. Many owners focus on simply “having coverage” without reviewing whether their liability limits are actually sufficient for their real-world exposure.

A business may carry a standard $1 million general liability policy and assume it is more than enough — until a major injury, lawsuit, or multi-party claim occurs. Between rising medical expenses, aggressive litigation, larger jury awards, and increasing legal defense costs, even relatively common accidents can escalate into extremely expensive claims.

This issue is especially concerning for businesses with frequent customer interactions, foot traffic, subcontractors, deliveries, events, or higher-risk operations.



Example:

A customer slips on an icy walkway outside a restaurant and suffers a traumatic brain injury requiring multiple surgeries and long-term rehabilitation. Medical costs, lost wages, pain and suffering claims, and legal expenses quickly push the claim far beyond what the business owner originally thought a “simple slip-and-fall” could cost.

Crime insurance protects businesses against employee theft, forgery, fraud, stolen funds, social engineering scams, and certain forms of financial dishonesty that may not be covered under standard property policies.

This exposure is far more common than many business owners realize — especially as digital payment systems, online banking, wire transfers, mobile apps, and remote financial management continue becoming standard for small businesses. Many owners assume theft only refers to physical cash or stolen inventory, but modern crime losses increasingly involve sophisticated financial fraud schemes carried out electronically.

Cybercriminals and fraudsters often target small businesses because they typically have fewer internal controls, less employee training, and weaker verification procedures than larger companies. Even trusted long-term employees can create exposure through embezzlement, forged checks, payroll fraud, stolen vendor payments, or unauthorized fund transfers.

Standard property and general liability policies often do not fully cover many of these financial crime-related losses. Crime insurance can help protect against employee theft, forgery, fraudulent transfers, social engineering scams, and certain types of financial fraud that might otherwise leave businesses absorbing substantial losses on their own.

Example:

 An employee at a construction company receives what appears to be a legitimate email from a vendor requesting updated payment instructions for an upcoming invoice. The employee unknowingly wires $45,000 to a fraudulent account controlled by cybercriminals. The business later discovers the vendor never sent the request, and the funds are unrecoverable.

Many businesses assume personal auto policies automatically cover employees using vehicles for business purposes. This is not always the case.

Hired and non-owned auto coverage helps protect businesses when employees use personal vehicles for work errands, deliveries, client meetings, transporting equipment, or running company-related tasks. Many business owners mistakenly assume an employee’s personal auto insurance automatically protects the business in these situations, but that is often not the case.

If an employee causes an accident while using their personal vehicle for business purposes, the injured party may sue not only the driver personally, but also the business itself. Without hired and non-owned auto coverage added to the policy, the business may have little or no liability protection for the lawsuit, legal expenses, or resulting damages.

This exposure is especially common for businesses that have employees making deliveries, traveling between job sites, attending meetings, transporting tools or supplies, or using personal vehicles for errands during the workday.

Example:

An employee of a catering company causes a serious accident while driving their personal SUV to deliver supplies for a corporate event. The injured driver sues both the employee and the catering business, alleging the employee was acting on behalf of the company at the time of the accident. The employee’s personal auto policy may provide limited protection for the driver, but without hired and non-owned auto coverage, the business itself may have no coverage for the lawsuit

Businesses that manufacture, distribute, sell, serve, or handle products may face product liability claims if their products allegedly cause bodily injury, illness, or property damage. Many business owners assume product liability only applies to companies that physically manufacture products, but the exposure is often much broader than people realize.

Even if a business did not make the product itself, it can still be pulled into a lawsuit simply for selling, serving, distributing, recommending, or handling the product. Injured parties often sue multiple businesses involved in the chain of distribution, including retailers, restaurants, wholesalers, installers, contractors, and event vendors.

Product liability claims can involve allegations of contamination, improper labeling, defective products, allergic reactions, design defects, improper installation, or failure to warn consumers about potential dangers.

Example:

A boutique gift shop sells imported candles manufactured by another company. One candle allegedly malfunctions and causes a house fire, resulting in significant property damage and injuries. Even though the boutique did not manufacture the candle, the business is still named in the lawsuit for selling the product.

Many of the most dangerous insurance gaps for small businesses are the quiet ones that owners rarely think about until after a claim occurs. While standard policies like BOPs provide an important foundation, they often exclude or limit critical coverages such as cyber liability, professional liability, crime insurance, umbrella coverage, and business interruption protection.

Regular insurance reviews become especially important after business growth or operational changes. Hiring employees, purchasing equipment, expanding services, signing contracts, opening new locations, increasing revenue, or attending off-site events can all create new exposures that existing policies may not properly address. Many businesses also sign leases and contracts without realizing they are assuming liability obligations their insurance policies may not automatically cover. Regular coverage reviews can help identify these hidden gaps before they turn into costly surprises.

If you own a business and are unsure whether your current insurance program properly protects you, now is the time to review your coverage before a claim happens. Reach out to McShea Insurance Agency for a free commercial insurance consultation and policy review to help identify potential gaps, outdated limits, and overlooked exposures within your current coverage program.