AIG vs THREE by Berkshire Hathaway: How Do They Compare for Cyber Insurance?

AIG markets three distinct cyber forms: CyberEdge, CyberEdge Plus and CyberEdge PC. AIG says coverage may be bought as a standalone CyberEdge policy or endorsed onto selected Financial Lines, Property and Casualty policies; the forms are not interchangeable descriptions of one coverage grant. ³Company-reported. AIG’s U.S. CyberEdge page; endorsement availability is stated only for selected policies. AIG’s legal footer says policies are written by subsidiaries or affiliates and coverage depends on underwriting and policy language.

THREE presents Cyber as a component of its combined Business Owners Policy rather than identifying it as a separate standalone policy on the reviewed product page. ⁶Company-reported. Company-described U.S. package structure. The page does not establish underwriting terms or that every listed category will be included for every applicant.

Confirm in your quote.

The linked sample policy's declarations identify Berkshire Hathaway Direct Insurance Company as issuer. ⁵Company-reported. This is the issuer named on the public sample only; the sample does not establish the issuing entity for every state-specific quote or buyer's issued policy.

AIG describes cyber coverage and risk services for organizations and clients. The reviewed product page does not publish a complete eligible-industry, revenue or security-control appetite; a particular applicant’s eligibility remains subject to underwriting. ³Company-reported. Audience stated by AIG on its U.S. CyberEdge marketing page; no application eligibility schedule was reviewed.

The reviewed product page does not state separate eligibility rules for Cyber; the general quote and advisor route is not proof that a particular business qualifies for it. ^6,4Not publicly disclosed. Eligibility and state availability remain unestablished for an individual risk until THREE returns its quote and applicable forms.

AIG describes CyberEdge as addressing breach-related financial costs such as response, data restoration, network interruption and cyber extortion. CyberEdge Plus is described for physical-world losses caused by a cyber event, including business interruption, property damage and physical injury; CyberEdge PC is described as excess of traditional property and casualty policies on a difference-in-conditions/difference-in-limits basis. The page says actual coverage depends on the facts and policy terms, conditions and exclusions. ³Company-reported. Product summaries on AIG’s U.S. page, preserving differences among the three forms. Examples are not a promise that any loss or expense is covered under an issued policy.

THREE's Business Owners Policy page lists Cyber Liability among its marketed coverage categories in the combined policy. This describes the product page, not whether the category appears in a particular quote or responds to a loss. ^6,5Company-reported. Official THREE package marketing for Cyber. The sample policy is state-selectable and does not establish that this item is included in every quote or issued policy.

The reviewed page does not state standard cyber limits, retentions or sublimits. Confirm each amount and applicable form in the quote and issued policy. ³Not publicly disclosed. AIG’s U.S. CyberEdge marketing page reviewed 2026-09-30; no buyer-specific quote, application outcome or policy wording was reviewed.

The reviewed public product page does not state a separate limit or deductible for Cyber; THREE says the quote-specific insurance summary lists limits and deductibles. ^6,5Not publicly disclosed. No number is inferred from the sample policy. The quote and issued declarations control the buyer-specific limit and deductible.

AIG describes cyber risk assessment, threat intelligence, alerts about known vulnerabilities, and a Cyber Resiliency Program. The page says these services help clients assess and improve cyber resilience; it does not promise that they prevent a breach or are available on identical terms with every form. ³Company-reported. Company-described cyber risk services on AIG’s U.S. CyberEdge page; product and account applicability should be confirmed in the quote.

Confirm in your quote.

AIG links a U.S. Cyber underwriting application and invites brokers to contact its national product and distribution teams. The page does not say that submitting an application results in a quote, acceptance or binding. ³Company-reported. Application and broker contact links on AIG’s U.S. CyberEdge page; no completed application or binding workflow was reviewed.

THREE directs small-business prospects to an online quote and says licensed Small Business Advisors can help with the process. ⁴Company-reported. This is the route for the overall THREE product. It does not show whether Cyber will be offered for a particular business or whether a customer can bind that line without an issued policy.

AIG says its cyber insureds can use a 24/7 claims hotline and that its claims team works with specialized legal and forensic firms on incident response. AIG’s example also describes assistance with regulatory disclosures and notifications. These service statements do not guarantee claim acceptance, payment or a particular response time. ³Company-reported. Company-reported services and example on AIG’s CyberEdge page; policy terms and the circumstances of a loss control any claim.

Confirm in your quote.