Estimated reading time: 5 minutes
The cyber insurance market just delivered a statement of confidence. Marsh Risk has expanded its Cyber ECHO facility to $200 million in capacity, making it the largest cyber insurance facility in the world. For large account buyers, brokers, and the underwriters backing it across Lloyd’s, the company, and Bermuda markets, the number matters. But the structure behind it may matter more.
The Headline Number In Context
Cyber ECHO launched in 2016. In the decade since, it has secured more than $55 billion in coverage for over 1,500 Marsh clients globally. That track record makes this expansion meaningful rather than just promotional. Thomas Reagan, Global Cyber Practice Leader at Marsh Risk, called ECHO “the world’s most comprehensive cyber insurance facility” and pointed to unmatched coverage limits and diverse placement options as key differentiators. When the world’s largest insurance broker expands its flagship cyber facility to $200 million, and the capital markets backing it across Lloyd’s, Bermuda, and the company market are willing to follow that appetite, it is worth noting. In a market that has spent several years tightening terms and scrutinizing aggregation risk, this kind of expansion doesn’t happen quietly.
The Reinstatement Feature Is The Real Story
The capacity number grabs headlines. The reinstatement options are what sophisticated buyers and brokers should actually focus on.
Cyber ECHO now offers all clients a free first reinstatement option and a paid second reinstatement for separate cyber events. In plain terms, if a client suffers a cyber incident and their coverage is depleted, they can reinstate it. If they get hit again, they can be reinstated a second time.
This matters because the traditional model of cyber insurance has always had a gap problem. A company that suffers a major ransomware attack in February and a business email compromise in August in the same policy year has historically been exposed after the first event. Reinstatement options directly address that gap. The fact that Marsh says the previous reinstatement feature has already been used extensively by clients tells you this isn’t theoretical, it’s meeting real demand from real clients navigating real incidents.
Who This Is Actually For
Cyber ECHO is a large account product. (Large account refers to insurance policies for companies with significant coverage needs and high premiums.) The bursary for risk management services kicks in at premiums above $1 million, which gives you a clear sense of the client profile. This is enterprise-level coverage for organizations with complex, global cyber exposures that can’t be adequately addressed by standard market placements.
For mid-market buyers, this announcement is less directly relevant, though it does signal broader market health. When capacity at the top of the market expands, it tends to ease pressure throughout the stack over time.
Get The Cyber Insurance News Upload Delivered
Subscribe to our newsletter!
What It Signals About Market Appetite
Serena France-Hayhurst, UK Cyber Placement Leader at Marsh Risk, put the risk environment plainly — cyber remains “one of the most critical threats facing organizations today, with the potential to cause severe operational and financial disruption, as well as extensive reputational damage.” That framing isn’t new. What is new is the market’s willingness to put $200 million of coordinated capacity behind it.
Marsh is positioning this expansion as a proactive response to an increasingly hostile environment rather than a reactive one. Reagan described the annual product update as ensuring Marsh continues to “deliver competitive and, above all, effective solutions that enable clients to anticipate emerging vulnerabilities.” The word anticipate is doing real work there. It signals that ECHO is being designed for the threat landscape ahead, not for the one that has already occurred.
For large account buyers questioning whether the cyber insurance market keeps up with an AI-accelerated threat environment, this expansion offers at least a partial answer. The capital is there for now.
FAQ — Marsh Cyber ECHO Expansion
What is Cyber ECHO?
Marsh Risk’s flagship cyber insurance facility, drawing on capacity from Lloyd’s, company, and Bermuda markets to provide large account buyers with flexible, high-limit cyber coverage.
What does the $200 million capacity mean?
It means qualifying Marsh clients can access up to $200 million in cyber insurance through a single coordinated facility — the largest of its kind in the market.
What is a reinstatement option?
If a cyber event depletes your coverage mid-policy year, a reinstatement allows you to restore that coverage for subsequent incidents. Cyber ECHO now offers one free reinstatement and a paid second option for separate events.
Who qualifies for the bursary?
Clients with premiums above $1 million can access bursaries for risk management services as part of the facility.
What does this tell us about market conditions?
That leading insurers across Lloyd’s and Bermuda are willing to deploy significant capacity into cyber risk right now — a meaningful signal for buyers navigating a complex and increasingly AI-driven threat landscape.
Related Cyber Liability Insurance Posts
- Protect Your Brand, Not Just Your Data: The Critical Role of ERM in Cyber Risk
- Incident Response Planning Cuts Cyber Risk, Marsh Report Finds
- Marsh Launches €5M Cyber Unity Facility Across Europe
- CyberShore Bermuda: Marsh Unveils $30M Excess Cyber Insurance Facility
- Marsh Fortifies Cyber Defense with Gamze Konyar as Head of Cyber, Europe
