Cyber insurance for retailers is shaped heavily by point-of-sale breach risk and PCI DSS exposure, which underwriters treat as a distinct category of loss.