CFC vs HUB International Cyber Insurance

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ⁵Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

HUB brokers cyber insurance rather than underwriting the coverage itself, and connects clients with cyber insurance specialists for a policy assessment. ¹²Company-reported. Cyber insurance product page as read 2026-09-23; the page does not name an issuing insurer.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^8,4Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

The cyber insurance page does not name an issuing insurer; HUB places cyber coverage with carriers that vary by client and placement. ¹²Not found in reviewed sources. Checked the cyber insurance product page on 2026-09-23; no carrier is disclosed there.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ⁵Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

HUB frames cyber insurance as relevant to any business that stores data on a network, without publishing a narrower eligibility list by size or industry on this page. ¹²Company-reported. Product-page framing; not a published underwriting appetite.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ⁵Company-reported. Cyber product page Key features list for Cyber Proactive Response.

HUB lists cyber coverage it arranges as privacy attorney services, IT forensic investigation, state breach-notification compliance costs, credit monitoring for affected individuals, crisis PR engagement, regulatory fines and class-action defense from a data breach. ¹²Company-reported. Product-page coverage list; the issued policy and its exclusions control an actual claim.

HUB cites statistics that data-privacy attacks occur roughly every 40 seconds in the U.S., that 85% of data-breach insurance claims come from small to midsize businesses, and that two-thirds of breaches are tied to third-party IT vendors, to explain why it recommends cyber coverage. ¹²Company-reported. Product-page statistics are company-cited industry figures, not independently verified by Spot and not HUB-specific claims data.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ⁵Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

Published policy limits or retentions for HUB-placed cyber coverage were not found on the product page; the page instead argues that response costs following a breach can reach the six figures to counter a perception that cyber insurance is unnecessary. ¹²Not publicly disclosed. Checked the cyber insurance product page on 2026-09-23; limits are set on the quote and declarations.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^6,7Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

Not described in the reviewed sources.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ⁸Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

HUB directs you to a broker or its cyber specialists for a policy assessment; no online quote is described. ¹²Company-reported. Product-page call to action as read 2026-09-23.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ⁷Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.

Not described in the reviewed sources.