An Illinois Appellate Court ruled that a cyber-insurance company was liable to defend a company’s BIPA claims, carving out an enticing—but complicated—path forward for companies looking for BIPA coverage.