Just because a ransomware victim files a cyber-insurance claim does not mean the cost will be covered.

The complaint is the first action under new Department of Financial Services regulations.

If victims don't report ransomware attacks to the FBI, insurers might be the next best source of information.

These figures come as insurers continue to assess whether to pay the extortion fees that hackers impose on their clients.

AIG had cited multiple clauses in its policy to argue against paying, though the court ruled the tactic did not count as "bad faith."

The ruling adds some clarity to the otherwise murky world of cyber-related insurance claims.