Chubb vs Marsh Cyber Insurance

Chubb underwrites Cyber Enterprise Risk Management (Cyber ERM) directly. It covers cyber, privacy and media exposures for organizations of any size that handle sensitive data or run a network or website. ³Company-reported. Cyber Insurance Coverage & Products page, Cyber Enterprise Risk Management section.

Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. ⁹Company-reported. Marsh corporate cyber insurance product page.

Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. ¹²Company-reported. MMA cyber solutions page.

The reviewed pages describe Chubb as the carrier but do not name the specific Chubb-group underwriting entity for cyber policies; the issued policy would name the entity. ^4,3Not found in reviewed sources. Both cyber pages as read on 2026-09-23.

The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. ¹⁰Not publicly disclosed. Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places.

Chubb says there are no minimum premiums and premiums scale for all risk sizes, offers Cyber Central and Marketplace quoting for risks under $100 million in revenue, and a customizable large-account cyber risk management solution for organizations over $1 billion in revenue. ³Company-reported. Cyber Insurance Coverage & Products page eligibility and quoting description.

MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. ¹²Company-reported. MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally.

Chubb lists first-party cyber incident response fund, business interruption (with contingent business interruption for outsourced technology providers), digital data recovery, and network extortion; third-party cyber/privacy/network security liability, payment card loss, regulatory proceedings and media liability; and cyber crime coverages (computer fraud, funds transfer fraud, social engineering fraud) available by endorsement. ³Company-reported. Cyber insurance coverage list on the products page; subject to exclusions and the policy as issued.

Chubb offers a Widespread Event Endorsement with separate limits and retentions for systemic cyber events, a Ransomware Encounter Endorsement that lets buyers tailor limits and retentions for ransomware losses, and a Neglected Software Exploit Endorsement that gives a 45-day grace period to patch published vulnerabilities before risk-sharing shifts toward the policyholder. ³Company-reported. Innovative coverage concepts section; endorsement availability depends on underwriting.

MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. ¹²Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement.

The reviewed pages do not publish specific per-policy limit or retention amounts; Chubb says it can build large insurance tower programs with substantial primary limits for organizations over $1 billion in revenue but gives no figures. ³Not found in reviewed sources. Cyber Insurance Coverage & Products page as read on 2026-09-23.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. ¹⁰Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit.

Chubb says cyber policyholders get access to a panel of pre-approved incident response providers, a 24/7 hotline and Cyber Alert app, a Cyber Threat Intelligence Team, a Vulnerability Management Outreach program, and the Chubb Cyber Index for trend and cost data. ⁴Company-reported. Cyber Insurance for Businesses page, Cyber Services and Beyond Risk Transfer sections.

Not described in the reviewed sources.

Agents and brokers can quote cyber alone through Cyber Central or bundled with other lines through Chubb Marketplace; multinational programs can be serviced locally in more than 35 countries. ³Company-reported. Cyber Insurance Coverage & Products page quoting section.

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. ^9,12Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders.

Chubb reports 24/7 incident response availability by hotline or its Cyber Alert app, and publishes an annual Cyber Claims Landscape report analyzing claim frequency, severity and ransomware trends. ⁴Company-reported. Cyber Insurance for Businesses page; claims scenarios and report are company-reported.

Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. ¹¹Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified.