The USA PATRIOT Act expanded definition of loss as result of hacking to include...
the costs of infrastructure before the attack happens.
the legal fees for suing the hackers.
the costs for addressing the vulnerabilities exposed by the hack.
the cost of responding to an attack, assessing damage and restoring systems.