Does your Westchester cyber policy actually cover the closing-day wire fraud call?
A side-by-side review of the Westchester Portfolio cyber form (a Chubb company) and the PBI Group Arch NetSafe® 2.0 program — what each pays, how much, and the conditions that decide real estate claims.
An independent, educational comparison — not affiliated with or endorsed by Westchester Fire Insurance Company or Chubb.
Westchester's cyber form is a serious, modern policy. Chubb wrote it with high limits across the board, a breach-response limit that sits outside the policy aggregate, a 6-hour business interruption waiting period, and $1,000,000 for hardware "bricking." On many lines below, Westchester is the stronger policy, and we mark those in green on the Westchester side. A comparison that hides the other carrier's strengths isn't worth reading.
But real estate cyber claims turn on two questions, and that's where the forms part ways.
First: whose money is covered, and who can the fraudster pretend to be? Both policies cover funds your firm holds for clients — Westchester through an ownership clause that reaches money "held by the Insured in any capacity," Arch through care, custody, and control language. The difference is the impersonation. Westchester's Social Engineering Fraud coverage only responds when the fraudster poses as one of your vendors, clients, or authorized employees — and it expressly excludes anyone posing as a bank or financial institution. The most common closing-fraud email impersonates the title company, the closing attorney, the lender, or the other side's broker. Whether any of them counts as your "vendor" is an argument. Arch names every one of them.
Second: who defends you when a client loses her own money? When a bad actor breaches your email, reads Mrs. Smith's closing details, and tricks her into wiring her own funds to a fraudulent account, Mrs. Smith has a claim against you. We call this 3rd Party Wire Fraud coverage. Here the news is good on both sides: Westchester's Cyber, Privacy and Network Security Liability insuring agreement contains no theft-of-funds exclusion, so that claim is defended and paid up to $1,000,000. Arch reaches the same place by endorsement. On this question, the policies are comparable.
So the honest summary is this: Westchester is broader on first-party limits and several conditions. Arch is built more tightly around the way real estate wire fraud, vendors, listings, and independent-contractor agents actually work.
What we found
Headline findings from our page-by-page review of the Westchester Portfolio Cyber policy — every endorsement read, every sublimit checked.
Side by side, coverage by coverage
Westchester shown first, Arch second. Arch limits shown at the $1,000,000 aggregate configuration. Select any coverage to expand the details.
Aggregate & Limit Structure Westchester Portfolio Cyber $1,000,000 + $1,000,000 breach response PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
$1,000,000 maximum policy limit. A "Side Car" endorsement places the breach response insuring agreement outside that limit, with its own $1,000,000.
PBI Group | Arch NetSafe® 2.0
One aggregate; every coverage part and sublimit sits inside it.
Defense Costs & Duty to Defend Westchester Portfolio Cyber Duty to defend PBI Group | Arch NetSafe® 2.0 Duty to defend
Westchester Portfolio Cyber
Defense inside limits; 100% of defense costs treated as covered when a claim mixes covered and uncovered matters.
PBI Group | Arch NetSafe® 2.0
Defense inside limits; 100% allocated to covered loss.
Retention Structure Westchester Portfolio Cyber $2,500, one per incident PBI Group | Arch NetSafe® 2.0 $1,000 – $5,000
Westchester Portfolio Cyber
$2,500 across every insuring agreement. When one incident touches several agreements, only the largest single retention applies. $0 for the breach coach.
PBI Group | Arch NetSafe® 2.0
One retention per side, but a single event can carry one third-party and one first-party deductible.
Retroactive Date Westchester Portfolio Cyber Full prior acts PBI Group | Arch NetSafe® 2.0 Full prior acts
Westchester Portfolio Cyber
Pending or prior proceedings date two years before inception.
PBI Group | Arch NetSafe® 2.0
Full prior acts.
Claim Reporting Deadline Westchester Portfolio Cyber As soon as practicable 90 days after a non-renewal PBI Group | Arch NetSafe® 2.0 90 days after the policy period
Westchester Portfolio Cyber
The clock starts only when a senior "Notice Group Member" (CEO, CFO, CIO, CISO, general counsel, risk manager, or equivalent) learns of the incident.
PBI Group | Arch NetSafe® 2.0
90 days after the policy period.
Consent to Settle (Hammer Clause) Westchester Portfolio Cyber 80% / 20% PBI Group | Arch NetSafe® 2.0 50%
Westchester Portfolio Cyber
If you refuse a recommended settlement, Westchester still pays 80% of later damages and defense.
PBI Group | Arch NetSafe® 2.0
50%.
Who Is Insured — Including Your Agents Westchester Portfolio Cyber Independent contractors included PBI Group | Arch NetSafe® 2.0 Contractors included when under contract with and indemnified by the firm
Westchester Portfolio Cyber
Any natural-person or single-person-entity independent contractor, for work within the scope of duties on behalf of the firm. No indemnity requirement.
PBI Group | Arch NetSafe® 2.0
Contractors included when under contract with and indemnified by the firm.
Misrepresentation & Rescission Westchester Portfolio Cyber Cannot be rescinded PBI Group | Arch NetSafe® 2.0 Application can void the policy to inception
Westchester Portfolio Cyber
The insurer may not void or rescind the cyber section for any insured. A misstatement removes coverage only for incidents tied to it — for any individual who knew, and for the firm if a senior officer (CEO, CFO, CIO, CISO, general counsel, risk manager, or equivalent) knew.
PBI Group | Arch NetSafe® 2.0
Application can void the policy to inception if a misstatement was intentional or material.
Cancellation & Extended Reporting Westchester Portfolio Cyber One-year tail only PBI Group | Arch NetSafe® 2.0 Nonpayment only · 1 / 3 / 6-year tail
Westchester Portfolio Cyber
1-year extended reporting at 100% of premium. The base form lets the insurer cancel only for nonpayment; the state amendatory endorsement on this placement adds a knowingly false application statement and a substantial change in exposure.
PBI Group | Arch NetSafe® 2.0
Nonpayment only · 1 / 3 / 6-year tail (100% / 175% / 250%).
Widespread Event Framework Westchester Portfolio Cyber Every incident is classified PBI Group | Arch NetSafe® 2.0 No such framework
Westchester Portfolio Cyber
Each incident is sorted into a "Limited Impact Event" or a "Widespread Event" (one attack hitting many companies). On this placement every widespread sublimit is $1,000,000 — but a widespread event at a cloud provider not scheduled on the policy pays $0 for contingent BI and data recovery, and an incident is deemed widespread if you choose not to provide proof of loss.
PBI Group | Arch NetSafe® 2.0
No such framework.
Network Security & Privacy Liability Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
Insuring Agreement E: claims arising from a network security failure or a failure — by you or an independent contractor you're responsible for — to protect personal or confidential information.
PBI Group | Arch NetSafe® 2.0
Dedicated Coverage Part A.
3rd Party Wire Fraud Westchester Portfolio Cyber Covered · $1,000,000 PBI Group | Arch NetSafe® 2.0 Covered · $1,000,000
Westchester Portfolio Cyber
Insuring Agreement E has no exclusion for theft or transfer of money. A client's claim that your breach led to her stolen closing funds is defended and paid up to the full limit, after the $2,500 retention.
PBI Group | Arch NetSafe® 2.0
Theft-of-funds exclusion deleted by endorsement.
Fine print
Both policies: The claim must flow from a breach of your systems or data. A spoofed look-alike domain with no access to your systems is not a cyber incident under either form — that claim belongs to your E&O policy.
Regulatory Proceedings & Fines Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
Includes investigations started by subpoena or civil investigative demand, insurable fines, and consumer redress funds.
PBI Group | Arch NetSafe® 2.0
Same scope.
PCI-DSS Assessments Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
$1,000,000.
PBI Group | Arch NetSafe® 2.0
$1,000,000.
Privacy Law Breadth Westchester Portfolio Cyber Any local, state, federal, or foreign privacy law PBI Group | Arch NetSafe® 2.0 Named statutes
Westchester Portfolio Cyber
Any local, state, federal, or foreign privacy law requiring privacy policies, security controls, or breach notification.
PBI Group | Arch NetSafe® 2.0
Named statutes — HIPAA, GLBA, FTC Act, state breach laws, GDPR, CCPA.
Website Tracking & Data Collection Westchester Portfolio Cyber Unintentional collection covered PBI Group | Arch NetSafe® 2.0 Excluded
Westchester Portfolio Cyber
An unintentional violation of privacy law, including unintentional wrongful collection, is itself a covered incident. Only intentional unlawful collection known to senior management is excluded.
PBI Group | Arch NetSafe® 2.0
Unauthorized collection, including cookies and tracking code.
Media Liability Westchester Portfolio Cyber $1,000,000, narrowed by endorsement PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
An endorsement redefines covered media content as material promoting the firm's own services and excludes content created or posted for any third party, including in the performance of professional services. Music used online is also excluded.
PBI Group | Arch NetSafe® 2.0
Content you publish — print, web, social, email.
Claims Between Insureds — Agent Privacy Claims Westchester Portfolio Cyber Employee claims only PBI Group | Arch NetSafe® 2.0 Employees and independent contractors
Westchester Portfolio Cyber
Claims by one insured against another are excluded, with a carve-back for "employee-related" privacy claims arising from a breach. Independent-contractor agents are insureds but not employees.
PBI Group | Arch NetSafe® 2.0
Carve-back expressly includes contractors.
Biometric Data Westchester Portfolio Cyber Exclusion with a $1,000,000 carve-back PBI Group | Arch NetSafe® 2.0 No exclusion
Westchester Portfolio Cyber
Effectively covered to the full limit.
PBI Group | Arch NetSafe® 2.0
No exclusion.
Unsolicited Calls, Texts & Email (TCPA) Westchester Portfolio Cyber Excluded PBI Group | Arch NetSafe® 2.0 Excluded
Westchester Portfolio Cyber
Excluded unless caused by a network security failure.
PBI Group | Arch NetSafe® 2.0
Excluded unless arising from a breach.
Breach Response Scope & Control Westchester Portfolio Cyber $1,000,000 outside the aggregate your choice of vendors PBI Group | Arch NetSafe® 2.0 $1,000,000 inside the aggregate
Westchester Portfolio Cyber
Breach counsel, forensics (including a PCI investigator), notification, credit monitoring, identity restoration, call center, PR. You may use any firm; non-panel vendors are sublimited to $500,000. No prior consent needed except for voluntary (non-required) notifications.
PBI Group | Arch NetSafe® 2.0
Arch selects counsel and forensics; prior consent required.
Breach Response Hotline Westchester Portfolio Cyber Chubb breach coach · $0 retention PBI Group | Arch NetSafe® 2.0 Mullen Coughlin · 844-202-1600
Westchester Portfolio Cyber
A call is not notice of a claim.
PBI Group | Arch NetSafe® 2.0
A call is not notice of a claim.
Hardware Replacement / Bricking Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $250,000
Westchester Portfolio Cyber
Insurer decides whether replacement beats repair.
PBI Group | Arch NetSafe® 2.0
$250,000.
Betterment (Security Upgrades) Westchester Portfolio Cyber $100,000 PBI Group | Arch NetSafe® 2.0 Not offered
Westchester Portfolio Cyber
Upgrades needed to close the vulnerability that caused the incident.
PBI Group | Arch NetSafe® 2.0
Not offered.
Reputational Harm Westchester Portfolio Cyber $1,000,000 · 180 days PBI Group | Arch NetSafe® 2.0 $250,000 · 14-day wait · 6 months
Westchester Portfolio Cyber
Lost profit after a required (or insurer-approved) breach notification, paid after an observation period of up to 90 days.
PBI Group | Arch NetSafe® 2.0
$250,000 · 14-day wait · 6 months.
Fine print
Westchester requires the loss to be proven by a quantifiable drop in seasonally-adjusted daily revenue. Commission income arrives in lumps at closing, so expect proof of loss to take real work with a forensic accountant (whose fees are covered with consent).
Cryptojacking & Telephone Hacking Westchester Portfolio Cyber Within the $1,000,000 BI limit PBI Group | Arch NetSafe® 2.0 $250,000 cryptojacking $250,000 telephone fraud
Westchester Portfolio Cyber
Extra phone, energy, and data charges from hijacked systems, including crypto mining.
PBI Group | Arch NetSafe® 2.0
$250,000 cryptojacking · $250,000 telephone fraud.
BI — Network Security Breach Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
$1,000,000.
PBI Group | Arch NetSafe® 2.0
$1,000,000.
Waiting Period Westchester Portfolio Cyber 6 hours PBI Group | Arch NetSafe® 2.0 12 hours
Westchester Portfolio Cyber
6 hours.
PBI Group | Arch NetSafe® 2.0
12 hours.
Period of Recovery Westchester Portfolio Cyber 180 days PBI Group | Arch NetSafe® 2.0 180 days
Westchester Portfolio Cyber
180 days.
PBI Group | Arch NetSafe® 2.0
180 days.
System Failure (No Hacker Required) Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $1,000,000
Westchester Portfolio Cyber
Human error, programming errors, power failure. A bad patch or update is covered only if the program ran successfully in its environment for 30 days first.
PBI Group | Arch NetSafe® 2.0
$1,000,000.
Cloud & Software Provider Outages Westchester Portfolio Cyber $1,000,000 PBI Group | Arch NetSafe® 2.0 $250,000 breach · $250,000 system failure
Westchester Portfolio Cyber
Contingent BI for cloud, SaaS, hosting, and data processing providers under written contract — breach, system failure, and preventative shutdown each at $1,000,000. (Subject to the widespread-event $0 rule above.)
PBI Group | Arch NetSafe® 2.0
$250,000 breach · $250,000 system failure.
Dependent Business Interruption (Non-IT Vendors) Westchester Portfolio Cyber Not covered PBI Group | Arch NetSafe® 2.0 $1,000,000 breach · $250,000 system failure
Westchester Portfolio Cyber
Contingent BI applies only to outsourced computing services. A title company, transaction coordinator, or other business partner going down is outside it.
PBI Group | Arch NetSafe® 2.0
Any business you depend on under written contract.
Computer System Definition — Agent Devices & Cloud Westchester Portfolio Cyber Broad PBI Group | Arch NetSafe® 2.0 Broad by endorsement
Westchester Portfolio Cyber
Hardware, software, phone systems, and mobile devices leased, owned, or operated by any Insured (independent-contractor agents included), plus systems run solely for the firm by a third party under written contract.
PBI Group | Arch NetSafe® 2.0
Extends to mobile devices and software of employees and individual contractors used for the firm's business.
Voluntary / Preventative Shutdown Westchester Portfolio Cyber $1,000,000 · no consent required PBI Group | Arch NetSafe® 2.0 Covered with Arch's prior written consent
Westchester Portfolio Cyber
Covers a reasonable shutdown in response to an actual or credible threat directed at your systems.
PBI Group | Arch NetSafe® 2.0
Covered with Arch's prior written consent directed by the CISO or equivalent.
Unsupported / Legacy Systems Westchester Portfolio Cyber No exclusion PBI Group | Arch NetSafe® 2.0 Excluded
Westchester Portfolio Cyber
No exclusion.
PBI Group | Arch NetSafe® 2.0
Excluded for the endorsement BI coverages.
Cyber Extortion / Ransomware Westchester Portfolio Cyber $1,000,000 ransomware sublimit equal to the limit PBI Group | Arch NetSafe® 2.0 $1,000,000 · no ransomware sublimit
Westchester Portfolio Cyber
A ransomware endorsement caps all costs from a ransomware event at $1,000,000 across every insuring agreement, at 0% coinsurance. An enhancement endorsement covers threats to release stolen personal information however it was taken. Ransomware must be reported to law enforcement, and you must use best efforts to keep the existence of extortion coverage confidential.
PBI Group | Arch NetSafe® 2.0
Payments with Arch's prior consent; sanctions compliance required.
Social Engineering — Limit & Trigger Westchester Portfolio Cyber $250,000 PBI Group | Arch NetSafe® 2.0 $250,000
Westchester Portfolio Cyber
An employee is deceived into transferring money or securities.
PBI Group | Arch NetSafe® 2.0
$250,000.
Who the Fraudster Can Impersonate Westchester Portfolio Cyber Vendors, clients, and authorized employees only PBI Group | Arch NetSafe® 2.0 Named
Westchester Portfolio Cyber
A "vendor" must have provided goods or services to your firm under a pre-existing arrangement. Impersonating a bank or any financial institution is expressly excluded. Title companies, closing attorneys, lenders, and the other side's broker are not named.
PBI Group | Arch NetSafe® 2.0
Client, vendor, partner, employee, contractor, bank, title company, escrow agent, closing attorney, real estate broker, mortgage broker.
Who Can Be Deceived Westchester Portfolio Cyber Employees of the firm only PBI Group | Arch NetSafe® 2.0 No restriction on who is deceived
Westchester Portfolio Cyber
For the crime coverages, "Insured" is narrowed to the firm itself, and Social Engineering Fraud requires that an Employee — a person the firm governs and directs — be the one deceived.
PBI Group | Arch NetSafe® 2.0
Social Engineering pays loss incurred by an Insured from Fraudulent Instructions, with no requirement that the person fooled be an employee. The Insured definition includes independent contractors under contract with and indemnified by the firm.
Client Funds in Your Care, Custody & Control Westchester Portfolio Cyber Covered PBI Group | Arch NetSafe® 2.0 Covered
Westchester Portfolio Cyber
Ownership clause reaches money owned by the firm, money it is legally liable for, or money held by the firm "in any capacity."
PBI Group | Arch NetSafe® 2.0
Including funds in a trust or escrow account.
Callback / Verification Requirement Westchester Portfolio Cyber None PBI Group | Arch NetSafe® 2.0 Required
Westchester Portfolio Cyber
None.
PBI Group | Arch NetSafe® 2.0
Second-channel verification before any transfer.
Funds Transfer Fraud Westchester Portfolio Cyber $250,000 PBI Group | Arch NetSafe® 2.0 $250,000
Westchester Portfolio Cyber
Fraudulent instructions to your bank in your name.
PBI Group | Arch NetSafe® 2.0
$250,000.
Computer Fraud Westchester Portfolio Cyber $250,000 PBI Group | Arch NetSafe® 2.0 No separately named computer fraud agreement
Westchester Portfolio Cyber
Money, securities, or property taken directly through a hack of your systems.
PBI Group | Arch NetSafe® 2.0
No separately named computer fraud agreement.
Invoice Manipulation Westchester Portfolio Cyber $250,000 · 48-hour window PBI Group | Arch NetSafe® 2.0 $250,000
Westchester Portfolio Cyber
Requires a remote hack of your systems, and the third party must pay the fraudster before or within 48 hours of your discovering the fake invoices. Variable costs only — no profit.
PBI Group | Arch NetSafe® 2.0
Triggered by a breach or a privacy violation; excludes profit.
Cyber Crime Aggregate Westchester Portfolio Cyber $250,000 per agreement, as scheduled PBI Group | Arch NetSafe® 2.0 $250,000 shared
Westchester Portfolio Cyber
The schedule gives each of the three crime agreements its own $250,000 aggregate; a single loss is limited to the largest one. Discovery-based; notice within 90 days of discovery, proof of loss within 180.
PBI Group | Arch NetSafe® 2.0
$250,000 shared across all four crime coverages.
Fine print
The endorsement's limits wording also refers to a combined "Cyber Crime Aggregate Limit" that the schedule never states separately. Expect the carrier to read the schedule as written, but the point is worth confirming with the underwriter.
Escrow, Title & Trust Account Exclusions Westchester Portfolio Cyber None PBI Group | Arch NetSafe® 2.0 None
Westchester Portfolio Cyber
None.
PBI Group | Arch NetSafe® 2.0
None.
War / Cyberterrorism Westchester Portfolio Cyber Narrow war exclusion PBI Group | Arch NetSafe® 2.0 War excluded, cyberterrorism carved back
Westchester Portfolio Cyber
Triggered only by formal government action — a declaration of war, an order to use force, or UN or NATO action. Forensic-firm or media attribution alone does not trigger it.
PBI Group | Arch NetSafe® 2.0
War excluded, cyberterrorism carved back.
Court Attendance Expenses Westchester Portfolio Cyber Not offered PBI Group | Arch NetSafe® 2.0 $100,000
Westchester Portfolio Cyber
Insured wages are excluded from claims expenses.
PBI Group | Arch NetSafe® 2.0
$100,000.
Additional Insureds by Contract Westchester Portfolio Cyber Blanket PBI Group | Arch NetSafe® 2.0 Not provided by endorsement
Westchester Portfolio Cyber
Anyone you're required by written contract to name, for incidents you commit.
PBI Group | Arch NetSafe® 2.0
Not provided by endorsement.
This comparison reflects an actual Westchester Portfolio Cyber & Professional Liability Policy issued by Westchester Fire Insurance Company (a Chubb company) to a real estate brokerage for the 2026–27 term, reviewed page by page — the general terms, the full Cyber Coverage Section, and every endorsement, including the cyber crime, ransomware sublimit, breach-response side car, biometric, media, and state amendatory endorsements. Limits shown are those on the reviewed placement; Westchester limits and sublimits vary by placement. A renewal-only endorsement allowing the insured to elect expiring policy terms was reviewed and not given a row, since it would not follow a new buyer. The Arch column reflects the PBI Group Arch NetSafe® 2.0 program at the $1,000,000 aggregate configuration with full prior acts, as described on our Arch NetSafe® 2.0 coverage summary. Premium varies by firm and is not shown. This page summarizes key terms in plain English; coverage is determined by the actual policy language in every case. Westchester® and Chubb® are trademarks of their respective owners; use here is for factual description only.
Want this review done on your policy?
Send us your current cyber policy — declarations pages, the full form, and every endorsement — and we'll walk you through what's covered, what isn't, and what we'd do differently. No pressure, no obligation.
Request Your Cyber Policy Review
WE RECOMMEND THAT YOU REVIEW ANY PROPOSAL WITH YOUR LEGAL COUNSEL AS PART OF YOUR DECISION MAKING PROCESS. THIS PAGE IS ONLY A HIGHLIGHT OF TERMS AND DOES NOT REPRESENT ALL TERMS IN THE POLICY LANGUAGE. YOU SHOULD MAKE ALL FINAL DETERMINATIONS ABOUT COVERAGE BASED ON THE ACTUAL POLICY LANGUAGE.
You'll be surprised how affordable the best can be.
Let PBI Group get you a quote — no fluff, no pressure, just a fair price for strong coverage.