THREE by Berkshire Hathaway vs USI Insurance Services: How Do They Compare for Cyber Insurance?

THREE presents Cyber as a component of its combined Business Owners Policy rather than identifying it as a separate standalone policy on the reviewed product page. ³Company-reported. Company-described U.S. package structure. The page does not establish underwriting terms or that every listed category will be included for every applicant.

USI is a broker, not an insurer, for cyber coverage. It places cyber and privacy liability policies for clients and layers on its own manuscripted program, PrivaSafe, rather than underwriting the risk itself. ^7,5Company-reported. PrivaSafe program page and USI's property & casualty and technology practice pages.

The linked sample policy's declarations identify Berkshire Hathaway Direct Insurance Company as issuer. ²Company-reported. This is the issuer named on the public sample only; the sample does not establish the issuing entity for every state-specific quote or buyer's issued policy.

USI does not name the insurer that issues PrivaSafe or other cyber policies on the pages reviewed. PrivaSafe is described as a manuscripted (custom-drafted) coverage form that USI negotiates with the market, so the carrier varies by placement. ⁷Not publicly disclosed. PrivaSafe program page as read on 2026-09-23; no dedicated cyber carrier list was found.

The reviewed product page does not state separate eligibility rules for Cyber; the general quote and advisor route is not proof that a particular business qualifies for it. ^3,1Not publicly disclosed. Eligibility and state availability remain unestablished for an individual risk until THREE returns its quote and applicable forms.

USI markets PrivaSafe to middle-market firms, saying they are particularly vulnerable to cyber events because they have limited in-house access to security expertise. The page also says any business that gathers personal or health information, manages a network, or accepts electronic payments is a potential target. ⁷Company-reported. Program page marketing description, not an underwriting appetite statement.

THREE's Business Owners Policy page lists Cyber Liability among its marketed coverage categories in the combined policy. This describes the product page, not whether the category appears in a particular quote or responds to a loss. ^3,2Company-reported. Official THREE package marketing for Cyber. The sample policy is state-selectable and does not establish that this item is included in every quote or issued policy.

USI describes PrivaSafe as covering three areas: liability costs (including inability to protect information and related tort liability), compliance and corrective costs (data breach and forensic costs, privacy regulatory costs, payment-card standards), and direct costs (network interruption, data reconstruction, cyber extortion, bricking, voluntary shutdown, reputational harm business interruption, and cyber crime). ⁷Company-reported. PrivaSafe program page; actual insuring agreements and exclusions are set by the issued policy form.

The reviewed public product page does not state a separate limit or deductible for Cyber; THREE says the quote-specific insurance summary lists limits and deductibles. ^3,2Not publicly disclosed. No number is inferred from the sample policy. The quote and issued declarations control the buyer-specific limit and deductible.

USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ⁷Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.

Confirm in your quote.

USI says PrivaSafe includes pre-breach services to help avoid cyber threats and post-breach services designed to streamline incident response and recovery, on top of USI's general property & casualty cyber specialists. ^7,8Company-reported. Program page and property-casualty practice team description.

THREE directs small-business prospects to an online quote and says licensed Small Business Advisors can help with the process. ¹Company-reported. This is the route for the overall THREE product. It does not show whether Cyber will be offered for a particular business or whether a customer can bind that line without an issued policy.

To review cyber exposure with USI, the program page says a buyer should be ready to provide current cyber policies (if any), an assessment of its largest financial and operational cyber vulnerabilities, and its most recent audited financials. ⁷Company-reported. PrivaSafe program page intake description.