Insurance for Private Water Utilities and Associated Water Districts
Specialized protection for small and board-managed utilities across Oregon, Washington, Idaho and Montana—including contamination, equipment, governance, cyber and service-interruption risks.
Request a Water District Risk Review
Call 1-800-452-6826
Why water utilities need specialized insurance
A private water utility is not a typical small business. It maintains critical infrastructure, serves a community and may face physical, environmental, operational, governance and digital risks at the same time.
Contamination and pollution
A biological or chemical contamination event can lead to bodily injury allegations, cleanup costs, public notification expenses and claims from customers or businesses. Coverage varies, and many standard policies contain pollution exclusions.
Failure to supply
A broken main, damaged pump, power loss or contaminated source can interrupt service. Businesses and residents may allege financial harm, making carefully written failure-to-supply protection an important part of the review.
Cyber and operational technology
Billing systems, remote access, sensors, programmable logic controllers and SCADA environments can create both data and operational exposures. A cyber event may disrupt service even when no personal information is stolen.
Coverage built around the way your utility operates
No two systems are identical. We review your assets, connections, employees, board structure, vehicles, contracts and technology before recommending coverage.
Core property and liability
- General liability
- Commercial property for buildings, tanks and infrastructure
- Equipment breakdown for pumps, motors and controls
- Pollution and contamination liability
- Failure-to-supply coverage
People, leadership and operations
- Directors and officers liability for board decisions
- Workers’ compensation
- Commercial auto
- Cyber insurance
- Crime, employment practices and umbrella options when appropriate
Coverage is subject to carrier eligibility, policy terms, conditions, limits and exclusions. A review does not guarantee that every coverage or limit is available for every utility.
Water utility cyber risk: four quick conversations
The videos below explain why water utilities should treat cybersecurity as an operational-continuity issue—not only a data-breach issue. Each written summary makes the key point accessible to visitors who prefer to read and gives search engines a clear description of the video.
Is your utility insured for a cyberattack?
Written summary: A cyberattack can create expenses for investigation, system restoration, legal response, notification and business interruption. Water utilities should confirm whether their policy addresses both information-system losses and interruption to physical operations.
Can unused technology create risk?
Written summary: Old user accounts, forgotten devices, unsupported software and unused remote-access tools can remain connected long after their business purpose ends. Maintaining an inventory and securely removing unused technology can reduce unnecessary entry points.
Is multifactor authentication turned on?
Written summary: A password alone may not stop an attacker with stolen credentials. Multifactor authentication adds another verification step and is especially important for email, administrative accounts and remote access to operational environments.
Are your VPN and firewall current?
Written summary: Internet-facing equipment and remote-access tools require current firmware, secure configuration and monitoring. Unsupported or poorly configured technology can expose both office networks and operational systems to unauthorized access.
Cyber insurance and cybersecurity work together
Insurance can help finance a covered response, but it does not replace security controls or an emergency response plan. A water district risk review should consider how technology, operations and policy language connect.
- Does cyber coverage include business interruption caused by a network or systems failure?
- How does the policy define a computer system, and can operational technology be included?
- Are incident-response, forensic, restoration and notification costs addressed?
- Are social engineering, funds transfer fraud, cybercrime or extortion sublimited?
- Does the application accurately reflect MFA, backups, remote access and network segmentation?
- How do cyber, property, equipment breakdown, pollution and general liability policies coordinate?
For preparedness help beyond insurance, review the EPA’s Small System Risk and Resilience Assessment Checklist and water and wastewater technical-assistance resources.
Request a Water District Risk Review
We’ll review your current insurance alongside the way your utility actually operates—from pumps, tanks and vehicles to board decisions, contamination, remote access and cyber response. You’ll receive a practical discussion of potential gaps and options, with no obligation to change coverage.
Schedule Your Risk Review
Contact Bancorp Insurance
Serving private water utilities and associated districts across Oregon, Washington, Idaho and Montana.
Frequently asked questions
Answers to common insurance, cyber and operational-risk questions from private water utilities and small water districts.
What insurance should a private water utility or water district consider?
A utility may need general liability, property, equipment breakdown, pollution or contamination liability, failure-to-supply coverage, directors and officers liability, cyber insurance, commercial auto and workers’ compensation. The appropriate combination depends on ownership, employees, assets, system design, contracts, service territory and policy eligibility.
Does general liability cover contaminated water?
Not automatically. Many general liability policies restrict or exclude pollution-related claims, and definitions differ by carrier. The policy should be reviewed specifically for biological and chemical contamination, bodily injury, third-party financial loss, cleanup and related response expenses.
What is failure-to-supply coverage?
Failure-to-supply coverage may respond to certain claims arising when a utility cannot deliver water because of a covered event. Because wording, triggers and exclusions differ, confirm whether the protection applies to physical damage, contamination, equipment failure, utility interruption or other causes relevant to your system.
Can cyber insurance cover a SCADA or operational-technology incident?
Possibly, but it depends on how the policy defines covered computers, networks, systems failure and business interruption. Some policies are written mainly around privacy and office IT. Ask whether SCADA, programmable logic controllers, remote telemetry and other operational technology are included or excluded and how cyber coverage coordinates with property and equipment breakdown policies.
Does cyber insurance pay for replacing outdated hardware or software?
Usually not as routine maintenance or a planned upgrade. A covered incident may include certain restoration or replacement costs, but policies typically do not serve as a technology-refresh budget. Keeping firmware, operating systems, VPNs, firewalls and remote-access tools supported and updated can also affect underwriting and claim response.
Why do insurers ask about multifactor authentication?
MFA can make stolen credentials less useful to an attacker. Cyber applications commonly ask where MFA is used, particularly for email, privileged accounts and remote access. Answers should be accurate and should distinguish business IT from remote access into operational technology.
What operational risks should a water district review beyond cyber?
Important exposures include contamination, pump or motor breakdown, electrical failure, water-main damage, wildfire, flood, earthquake, vehicle accidents, employee injury, contractor risk, chemical handling, supply-chain delays, board decisions and the ability to provide emergency water or communicate during an outage.
Are board members personally protected?
Directors and officers liability can protect the organization and eligible board members from certain claims involving management decisions, governance or alleged wrongful acts. Review who qualifies as an insured, defense provisions, exclusions, prior acts and whether employment-related allegations require separate coverage.
Do small utilities need a risk and resilience assessment?
Even when a small system is not subject to a specific federal certification requirement, a voluntary assessment can help identify critical assets, threats and practical mitigation priorities. EPA offers a small-system checklist and technical assistance. Your insurance review is separate from regulatory compliance and should not be treated as legal or cybersecurity advice.
What happens during Bancorp’s Water District Risk Review?
We discuss your utility’s operations and review available policy information for areas such as contamination, service interruption, property valuation, equipment, board liability, vehicles, employees and cyber. We then explain potential gaps, questions for your current carrier and available insurance options. Coverage cannot be confirmed without reviewing the actual policy and endorsements.
Which states does Bancorp serve for water utility insurance?
Bancorp Insurance works with private water utilities and associated water districts across Oregon, Washington, Idaho and Montana. Carrier availability and coverage options vary by state and individual risk.
This page provides general insurance information only and is not legal, regulatory, engineering, cybersecurity or coverage advice. Only an issued policy and its endorsements determine coverage.
