[collingreene]

This exists and companies purchase it, ex: https://www.thehartford.com/data-breach-insurance

Risks (all kinds, not just technical) can be accepted, ignored, transferred and mitigated so it is important to have this option.

Its still not a great option for anyone involved as it is hard to price and last I checked had pretty low ceiling on payouts.