Although a policy will pay for forensics and legal fees after a breach, it does not cover material valuation change, said Jake Olcott, former counsel to the U.S. House of Representatives Homeland security committee and currently vice president of strategic partnerships at BitSight. When companies such as Equifax suffer large market cap losses, those are not covered by insurance to "make up the difference in the price before the breach," he said.