Ask HN: How does a company insure against data breaches?

Do large SaaS firms tend to carry the same kind of cyber-liability coverage?