Cyber Risk Management

Cyber Services for Incident Response

Incident Response Services Overview

Welcome to Chubb’s Cyber Services for Incident Response! We offer these services because we believe that being ready to respond will help reduce the exposure to a loss when a cyber event occurs. Chubb cyber policyholders have access to Incident Response Services to get help when an event occurs. Incident Response services are provided by a panel of Chubb pre-approved service providers. For a complete list of services, please visit www.chubb.com/us/cyberservices.

Crisis Hotline – Get Help with Urgent Matters

As a policyholder, when you experience a cyber incident that you feel is an urgent matter, you can contact the 24/7 Crisis Hotline. Your message will be routed immediately to Chubb’s Incident Response Coach, a pre-approved law firm that is adept in handling cyber matters. The Incident Response Coach will contact you to assist with the initial event triage, and can subsequently help, as applicable, to: i) investigate the legitimacy and impact of the event; ii) manage the legalities and regulatory communications if sensitive and protected information has been compromised; and iii) engage the services of other Incident Response Team members.

Cyber Incident – Claims Process

Upon experiencing a cyber incident, you can contact your broker or agent or provide notice to Chubb by sending an email to cyberclaimreport@chubb.com. You will then be assigned to a Chubb cyber claims specialist for initial analysis and triage of the incident. If warranted, the specialist can assist you in engaging one of our Cyber Incident Response Coaches. The Chubb cyber claims specialist will assist you as you navigate through this process, including answering questions on what specific incident response services may be required and helping you to engage various service providers within the Cyber Incident Response Team, if necessary.

Incident Response Team – Our Partners in Response

Chubb’s Cyber Incident Response Team is a diverse group of independent service providers that provide specific incident response services in the event of a cyber incident. Chubb maintains relationships with experts in multiple response disciplines (e.g., forensics, public relations, notification, call center, legal, extortion, business interruption) to assemble the proper resources in order to obtain the best resolution for its insureds.

Frequently Asked Questions

Below is a list of questions that are frequently asked by cyber policyholders. If you have a question that isn’t listed or need more information, please ask your broker or agent, or send an email to cyber@chubb.com.

Does calling the Crisis Hotline satisfy notice of a claim to Chubb?
No. The Crisis Hotline is intended for the initial triage of an urgent event, and does not satisfy the claim notification requirements of your policy.
Is a list of firms who are currently a part of Chubb’s Cyber Incident Response Team available? Yes. Please contact your agent or broker for a copy. Learn more about the Cyber Incident Response Team.
Can I meet with an Incident Response Coach before experiencing a cyber incident? Yes. We encourage our policyholders to get acquainted with the Cyber Incident Response Coaches early in the policy period.
Is the role of an Incident Response Coach different than the other service providers on the Incident Response Team? Yes. The Incident Response Coaches are meant to assist with the initial triage of cyber events and, where necessary, work with the Chubb cyber claims team through the continued remediation of an incident.
Can other firms not listed be added to the Incident Response Team? Yes. Specific to Chubb, policyholders have the option of requesting their own firms at the time of binding. All firms are subject to review and approval by Chubb.
Are the rates of the Incident Response Team’s services pre-negotiated by Chubb? Yes. The rates provided by the Incident Response Team firms must meet Chubb’s guidelines.
Must a policyholder engage Chubb’s Cyber Incident Response Team members if they experience a cyberincident? No. A policyholder is under no obligation to contract for services with any of the Cyber Incident Response Team service providers.