Hiscox vs Marsh Cyber Insurance

Hiscox Inc. sells cyber insurance directly online as a standalone product for small businesses, separate from its business owner's policy, which also offers an optional cyber add-on. ⁴Company-reported. Company-stated standalone small-business cyber product; the BOP cyber add-on is a distinct package option described on a different page.

Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. ¹¹Company-reported. Marsh corporate cyber insurance product page.

Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. ¹⁴Company-reported. MMA cyber solutions page.

Hiscox's appetite guide and About Hiscox US page name Hiscox Insurance Company Inc. (NAIC 10200) as the underwriter of admitted Hiscox NOW cyber policies. ^6,3Company-reported. Admitted small-business cyber coverage as described in company materials; the exact contracting entity for a particular state or channel should be confirmed on the quote.

The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. ¹²Not publicly disclosed. Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places.

Hiscox markets cyber insurance to small businesses broadly and specifically to IT and technology consultants, describing itself as customizing coverage for the technology sector's data-handling and security exposures. ^4,5Company-reported. Company-stated audience across the standalone cyber page and the IT-insurance page.

MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. ¹⁴Company-reported. MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally.

Hiscox describes cyber coverage as responding to data breaches, cyberattacks and related losses, and its IT-insurance page shows an illustrative breach-response example describing notification and related costs after a data incident. ^4,5Company-reported. Product-page description; the illustrative example is explicitly a hypothetical scenario, not a specific limit or claim outcome, and actual coverage terms are set by the issued policy.

MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. ¹⁴Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement.

The cyber product page does not publish standard limit, retention or deductible amounts; figures shown elsewhere on the site are illustrative examples rather than quotes. ⁴Not publicly disclosed. Public product page as previously reviewed.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. ¹²Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit.

The reviewed cyber product page does not describe ongoing security-monitoring or risk-prevention services made available to policyholders; it describes post-incident breach-response coverage rather than a monitoring service. ⁴Not found in reviewed sources. Standalone cyber product page as previously reviewed.

Not described in the reviewed sources.

Hiscox says eligible buyers can get a cyber insurance quote online, with a licensed-agent phone line available for questions during the process. ⁴Company-reported. Company-described online application; eligibility and binding conditions require confirmation on the actual application.

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. ^11,14Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders.

Not described in the reviewed sources.

Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. ¹³Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified.