Marsh Risk has expanded its Cyber ECHO facility to US$200 million, making what the company calls the largest cyber insurance facility of its kind even bigger.
The update adds a free coverage reinstatement option and a paid second reinstatement for separate cyber events. Clients with premiums above US$1 million also become eligible for bursaries toward risk management services.
Cyber ECHO was first launched in 2016 as a global excess cyber risk facility. It pools capacity from insurers across Lloyd's, company, and Bermuda markets into a single pre-arranged structure, operating with as few as two lead underwriters.
Rather than negotiating with each carrier individually, clients access the full coverage tower through one placement.
Since inception, the facility has secured more than US$55 billion in cover for over 1,500 clients globally. Munich Re pegged global cyber insurance premiums at US$15.3 billion in a 2024 report, a figure that puts into perspective the cumulative scale of what a single facility has deployed over the past decade.
The reinstatement feature targets a well-known weakness in cyber policies. Most operate on an aggregate limit, and each claim chips away at the total available cover for the policy period. Specialist insurer CFC has previously noted that a single ransomware attack can exhaust a policyholder's entire limit, leaving nothing for a second unrelated incident in the same year.
Cyber ECHO's reinstatement is offered at pre-agreed rates. Once triggered, the reinstated limit drops down to attach as the primary layer should a second loss occur. Marsh said the earlier version of the feature had already seen extensive use following client incidents.
Thomas Reagan (pictured above), global cyber practice leader at Marsh Risk, said the facility has "evolved into the world's most comprehensive cyber insurance facility, offering unmatched coverage limits, diverse placement options, and innovative enhancements."
The expansion arrives as the broader cyber insurance market continues to grow. Gallagher's 2026 outlook estimated the market at US$16 billion to US$20 billion in 2025, with projections suggesting it could reach between US$30 billion and US$50 billion by 2030. North America accounts for 60% to 70% of global premiums.
Pricing, though, is moving in the opposite direction from risk. Primary rates are expected to keep softening through 2026, even as threat activity escalates. Ransom payment rates fell to under 32% in 2025, with average payouts declining 10%.
Serena France-Hayhurst, UK cyber placement leader at Marsh Risk, said cyber threats remain "one of the most critical threats facing organisations today," adding that Cyber ECHO is designed to give clients "greater certainty in dealing with ever-evolving cyber threats."
