Accessing The Chubb Incident Response Team

Mobile Application IOS
Find the “Chubb Cyber Alert” app on the Apple Store for iOS devices
Mobile Application Android
Find the “Chubb Cyber Alert” app on the Android New! Store for Android devices
Online
Submit an incident through our secure web form
24/7 Telephone Hotline
Calling from the UK? Call 0800-279-7004. See link below for global hotline numbers.

What to expect after you report an incident

Your step-by-step guide to navigating a cyber incident with Chubb. From reporting the cyber incident to recovery and follow-up
1. Report the incident

Report a live or suspected cyber incident through the mobile app, online portal or 24/7 hotline.

Mobile App IOS

Mobile App Android

Online Portal

24/7 Telephone Hotline

2. Initial contact

A Chubb Incident Response Centre agent will contact you within 1 minute to gather basic incident details and initiate the Chubb Incident Response Platform.

What information to have ready

3. Incident assessment and response planning

Within 1 hour of reporting an incident, you will be contacted by the Incident Response Manager, who will support you by assessing the situation, prioritising immediate actions, and coordinating the response.

The role of the Incident Response Manager

 

4. Specialist support engaged (if required)

In consultation with you, the Incident Response Manager can appoint specialist cyber vendors to support the incident response and recovery process. This includes IT forensics, legal counsel, regulatory support, public relations, identity protection, credit monitoring, or forensic accounting.

Who are Chubb’s preferred cyber vendors?

The Chubb Cyber Vendor Index

 

5. Recovery

Once the immediate threat has been contained, the Incident Response Team will support recovery of your business operations and help manage ongoing response activity.

6. Follow-up and post-incident support

Once the incident has been resolved and you are fully recovered, you will have the opportunity to discuss the provision of further post-incident support. This may include root cause analysis, remediation advice, lessons learned, and future risk mitigation guidance.

Chubb Cyber Risk Improvement Services

Chubb Cyber Incident Response – Frequently Asked Questions

You can report a cyber incident to Chubb 24/7/365 using any of the following methods:
 

For the fastest response, we recommend using one of these direct channels. You may also notify your broker, but please contact Chubb directly as soon as possible to ensure immediate support

To help us respond quickly and effectively, please provide the following details if available:

 
  • Company name
  • Contact name and phone number
  • Policy reference number
  • Location of the master policy
  • Broker name
  • Basic details of the incident (location, type of incident).
     

Please report an incident immediately even if you do not have all the information and our team will guide you through the next steps.

The Incident Response Manager (IRM) is your dedicated project manager during a cyber incident. The IRM will:

 

  • Make initial contact (typically within one hour)
  • Gather essential details and assess the situation
  • Develop a coordinated response plan
  • Connect you with specialist vendors as needed (e.g., IT forensics, legal, PR)
  • Guide you through containment, recovery, and regulatory notification.
     

Your IRM ensures your response is efficient, joined up, and tailored to your needs and is a vital component of any incident response. 

Chubb partners with a panel of thoroughly vetted cyber experts - including IT forensics, ransom negotiators, legal counsel, public relations, identity protection, credit monitoring, and forensic accountancy specialists.

 

Chubb’s panel of preferred vendors are listed by country at www.chubb.com/cyber-IR-international.

 

  • You are not required to use Chubb’s vendors, but doing so gives you access to preferential rates and experts who are highly experienced in responding to cyber incidents and are familiar with insurance reporting requirements.
  • This means you benefit from fast and effective incident response, seamless coordination with Chubb’s claims process, and support from trusted professionals who understand how to help you recover quickly and efficiently.
  • All vendor contracts are direct between you and the vendor. Chubb is not a party to the contract, ensuring transparency and avoiding conflicts of interest.

Our panel vendors are selected for their proven expertise in both cyber incident management and insurance, helping you minimise disruption and maximise peace of mind.

Yes. Chubb offers flexibility for policyholders to use their own trusted cyber vendors. Where this is the preferred approach, we recommend:
 

  • Including your chosen vendors in your disaster recovery plan and
  • Ensuring they understand your insurance policy and the insurance claims process

Chubb’s panel of vendors is available to complement your existing vendor relationships if needed.

Chubb will review all costs incurred for reasonableness and necessity and in line with your policy terms and conditions. 

Chubb’s claims team is here to guide you through every step of the claims process, providing clarity on coverage and ensuring prompt resolution.
 

We recommend that policyholders notify Chubb as soon as you suspect or experience a cyber incident, using the app, web portal, or hotline.
 

Chubb’s claims team will work with you and your IRM to obtain relevant information to complete a review of your claim and assess coverage promptly. We are committed to minimising disruption and supporting your recovery with expertise, empathy, and a solutions-focused approach.

The Chubb Cyber Index is a public tool that provides anonymised, real-world claims data by industry and revenue band. The Index is based on Chubb’s aggregated claims data and is updated regularly.
 

  • Benchmark your cyber risk profile and understand the impact of incidents in your sector
  • Access industry-specific insights and trends
  • Use the Index to inform your cyber resilience planning.

 

  • Identify who is authorised to notify Chubb of an incident
  • Ensure notification processes are clear for all offices and territories
  • Store your business continuity and disaster recovery plans in an accessible location
  • Align your plans with your insurance policy requirements, including reporting thresholds and timelines
  • Consider creating a simple decision tree for incident escalation and notification
  • Regularly test and update your plan