In a well-reasoned recent opinion, an Illinois appellate court strictly construed a cyber policy, ruling that reasonable—but contractually unnecessary—payments made by an insured following a cyberattack did not constitute insured “extra expense.”While the decision is designated as “unpublished,” it is an important decision for cyber insurers and insureds alike. Specifically, the case provides clear guidance in situations where an insured takes appropriate, but ultimately flawed, actions in response to a cyb ...