I feel like the lawyers failed this one for the company that was randsomware attacked. They could very easily say that the attack caused a physical loss of data, because while everyone likes to pretend that stuff stored on computers is digital, the reality is, its physical. Every program, every email, everything is a long string of 1 and 0s physically written to a hard drive. All the media is physically stored on a hard drive the same way we used to store paper with writting in a filing cabinet. If a fire burned down an office building and bunch of files were lost, that would be covered by insurance. I see no difference between that and a ransomware attack physically re-writting or erasing the data on hard drives.