What does your cyber policy actually cover when a closing goes wrong?
A plain-English, coverage-by-coverage summary of the PBI Group Arch NetSafe® 2.0 cyber program for real estate professionals — what it pays, how much, and the conditions you should know before you ever need it.
An educational summary of the program PBI Group places. Coverage is subject to the actual policy terms.
Most people buy cyber insurance from a one-page quote. The coverage that decides a claim isn't on that page. It lives in endorsements, sublimits, definitions, and conditions — often on the last pages of the policy. So instead of comparing Arch NetSafe® 2.0 to another carrier, this page walks through the program on its own: every coverage part, all twelve endorsements PBI Group adds, and the fine print. Where a condition could matter at claim time, we say so plainly. A summary that only lists the good parts isn't worth reading.
For real estate brokerages, escrow and title companies, and property managers, two questions matter above all the rest. First: whose money is covered. Real estate firms hold other people's money — earnest deposits, security deposits, rent rolls, closing funds. Arch NetSafe® 2.0 covers social engineering and funds transfer losses not just of your own money, but of a client's funds in your care, custody, and control, including funds in your trust or escrow account.
Second: who defends you when a client loses her own money. When a bad actor breaches your network or email, reads Mrs. Smith's closing details, and uses that private information to deceive her into wiring her own funds to a fraudulent account, Mrs. Smith has a claim against you. We call this 3rd Party Wire Fraud coverage, and it lives in the Network Security & Privacy Liability coverage part. Most cyber policies exclude any loss involving the theft or transfer of money. The PBI Group Arch program deletes that exclusion by endorsement, so Mrs. Smith's claim is defended and paid up to the full policy limit.
There is a third question that matters to brokerages specifically: who counts as "you." Most brokerages run on independent-contractor agents, and most closing-fraud schemes start in an agent's inbox. Arch's definition of Insured includes independent contractors under contract with — and indemnified by — the firm, so a breach that runs through an agent's account isn't automatically someone else's problem.
Below, each coverage is organized the way Arch NetSafe® 2.0 is built: five coverage parts plus the Cyber Crime endorsement. Limits are shown at a $1,000,000 aggregate with full prior acts; a $500,000 aggregate and deductibles of $1,000, $2,500, or $5,000 are also available. Green marks coverage that is included as stated. Amber marks a condition, sublimit, or exclusion worth knowing — not a reason to worry, but a reason to read.
What we found
Headline findings from our page-by-page review of an issued Arch NetSafe® 2.0 policy — base form, all twelve endorsements, every sublimit checked.
Coverage by coverage
Organized the way Arch NetSafe® 2.0 is built — coverage parts plus the Cyber Crime endorsement. Select any coverage to expand the details.
Policy Aggregate & Coverage Part Limits PBI Group | Arch NetSafe® 2.0 $1,000,000 Each coverage part available to the full aggregate
What it means
One $1,000,000 aggregate for the policy year, with each of the five coverage parts available up to that full amount. Endorsement sublimits — Cyber Crime, bricking, reputational harm, and others below — sit inside the aggregate, not on top of it. A $500,000 aggregate is also available.
Defense Costs & Duty to Defend PBI Group | Arch NetSafe® 2.0 Duty to defend Defense inside limits · 100% of defense allocated to covered loss
What it means
Arch has the right and duty to defend any covered claim, even if it is groundless, false, or fraudulent. Defense costs are part of — not in addition to — the limit, which is standard for cyber. When a lawsuit mixes covered and uncovered allegations, 100% of defense costs are allocated to covered loss.
Deductible Structure PBI Group | Arch NetSafe® 2.0 $1,000 – $5,000 Highest third-party plus highest first-party may both apply
What it means
One deductible applies per claim or event. When a single lawsuit triggers both liability parts, only the highest deductible applies. When a single related event triggers several first-party parts, only the highest applies.
Fine print
A breach that produces both a lawsuit and a breach-response bill can carry two deductibles — one on the third-party side and one on the first-party side. At a $5,000 deductible, that is up to $10,000 for one event.
Retroactive Date PBI Group | Arch NetSafe® 2.0 Full prior acts All coverage parts
What it means
No retroactive date restriction on any coverage part. A breach that began years ago and is only now discovered can still be covered, as long as no one in a management role knew of it before the policy began.
Claim Reporting Deadline PBI Group | Arch NetSafe® 2.0 90 days After the policy period · extended by endorsement
What it means
Claims and first-party events must be reported as soon as practicable, and no later than 90 days after the policy period ends. The base form allows 60 days; PBI Group's endorsement extends it.
Fine print
Calling the Arch breach hotline is not notice to the insurer. Written notice must still go to Arch claims.
Consent to Settle (Hammer Clause) PBI Group | Arch NetSafe® 2.0 50% Insurer pays 50% of loss above a refused settlement
What it means
Arch won't settle a claim without your consent. But if you refuse a settlement Arch recommends and the claimant would accept, Arch pays the recommended amount and defense costs to that point, plus 50% of anything above it.
Who Is Insured — Including Your Agents PBI Group | Arch NetSafe® 2.0 Contractors included When under contract with and indemnified by the firm
What it means
The firm, its subsidiaries, and its principals, partners, officers, directors, and employees — plus any independent contractor under contract with and indemnified by the firm, for work performed on its behalf. Private information in the custody of any insured counts, so a breach of an agent's account can trigger coverage. An endorsement adds the mobile devices and software of employees and individual contractors to the definition of Computer System for business interruption.
Fine print
The contractor must be indemnified by the firm. Many independent contractor agreements run indemnity the other way — the agent indemnifies the broker. Check yours.
Misrepresentation & Severability PBI Group | Arch NetSafe® 2.0 Application matters Individual insureds protected · management knowledge imputed to the firm
What it means
The application is treated as a separate application for each individual insured, and one person's knowledge is never imputed to another individual. Only the knowledge of a "Claim Manager" — CEO, COO, CFO, general counsel, CTO, CIO, CISO, chief compliance officer, or risk manager — is imputed to the firm.
Fine print
An application misrepresentation made with intent to deceive, or that materially affects the risk, can void the policy back to inception.
Cancellation, Territory & Extended Reporting PBI Group | Arch NetSafe® 2.0 Worldwide Insurer can cancel only for nonpayment · 1 / 3 / 6-year tail
What it means
Coverage applies worldwide. Arch may cancel only for nonpayment of premium. If the policy is cancelled or non-renewed without replacement, you can buy a 1-year (100% of premium), 3-year (175%), or 6-year (250%) extended reporting period.
Network Security & Privacy Liability PBI Group | Arch NetSafe® 2.0 $1,000,000 Dedicated Coverage Part A
What it means
Lawsuits, demands, and arbitration arising from unauthorized access to your systems, transmission of malicious code, denial-of-service attacks, or a failure to protect private information in your care — client Social Security numbers, bank details, loan documents — including breaches at a vendor holding data on your behalf. Damages, settlements, judgments, and insurable punitive damages are covered.
3rd Party Wire Fraud (Theft of Funds Exclusion Deleted) PBI Group | Arch NetSafe® 2.0 Covered Exclusion deleted from Coverage Part A by endorsement
What it means
The base Arch form excludes theft of money and transfers of money from accounts under an insured's control, including customer accounts. PBI Group's endorsement deletes that exclusion from Coverage Part A. When a breach of your systems exposes a client's closing details and she is deceived into wiring her own funds to a bad actor, her claim against you is a covered claim with a duty to defend, up to the full $1,000,000.
Fine print
The claim must arise from a breach of your systems or data. If a fraudster spoofs your domain without ever accessing your systems, there is no breach to trigger this part — that claim belongs to your E&O policy.
Regulatory Proceedings & Fines PBI Group | Arch NetSafe® 2.0 $1,000,000 Including civil investigative demands
What it means
Defense costs and insurable civil fines and penalties from a regulatory proceeding alleging a privacy violation — including an investigation started by a civil investigative demand or request for information — plus amounts paid into a consumer redress fund.
PCI-DSS Assessments PBI Group | Arch NetSafe® 2.0 $1,000,000 Within Coverage Part A
What it means
Fines, penalties, and assessments demanded by a card brand or acquiring bank for PCI non-compliance that resulted in a breach.
Privacy Law Breadth PBI Group | Arch NetSafe® 2.0 Named statutes HIPAA, GLBA, FTC Act, state breach laws, GDPR, CCPA
What it means
A violation of a privacy law is itself a covered privacy violation — HIPAA, Gramm-Leach-Bliley, the FTC Act and state consumer protection laws, state breach notification laws, other state, federal, and foreign privacy laws, and, by PBI Group endorsement, the EU GDPR and the California Consumer Privacy Act.
Media Liability PBI Group | Arch NetSafe® 2.0 $1,000,000 Dedicated Coverage Part B
What it means
Claims for defamation, trade libel, invasion of privacy, plagiarism, misappropriation of advertising ideas, and copyright, trademark, or domain name infringement arising from content you publish — print, web, social, and email.
Fine print
Patent and trade secret claims are excluded, as are claims over inaccurate descriptions of the price or quality of goods or services.
Liability Exclusions to Know PBI Group | Arch NetSafe® 2.0 Excluded TCPA/CAN-SPAM, unlawful data collection, contracts, bodily injury
What it means
Coverage Part A does not apply to claims over unsolicited calls, texts, faxes, or emails (TCPA, CAN-SPAM) unless they arise from a breach; the unauthorized collection of personal information, including through cookies or tracking code; liability you assume by contract beyond what the law would impose (PCI and confidentiality obligations are carved back); or bodily injury and property damage.
Claims Between Insureds PBI Group | Arch NetSafe® 2.0 Employee privacy claims covered Carve-back to the insured-vs-insured exclusion
What it means
Claims by one insured against another are excluded, with an important exception: a claim by an employee or independent contractor alleging that the firm failed to protect their own private information is covered, as long as they weren't involved in the violation.
Data Incident Response Expense PBI Group | Arch NetSafe® 2.0 $1,000,000 All response services · full limits
What it means
Breach counsel, computer forensics to find the cause and the affected individuals, notification to affected individuals, credit monitoring, identity theft education and insurance, call center services, public relations and crisis management, and restoration of damaged or destroyed data — all to the full policy limit. Counsel and forensic firms are selected by Arch, and Arch's prior consent is required.
Breach Response Hotline PBI Group | Arch NetSafe® 2.0 24 / 7 Mullen Coughlin · 844-202-1600
What it means
Immediate access to an experienced breach response law firm the moment something looks wrong.
Fine print
A hotline call is not notice of a claim. Written notice must still go to Arch claims.
Property Damage / Bricking PBI Group | Arch NetSafe® 2.0 $250,000 Sublimit · hardware replacement
What it means
The cost to replace any part of your computer system that no longer works because an attack reprogrammed its software or firmware — "bricking" — when replacement is reasonable and necessary to restore your data.
Fine print
A $250,000 sublimit within the Data Incident Response limit.
Reputational Harm PBI Group | Arch NetSafe® 2.0 $250,000 14-day wait · 6-month recovery
What it means
Lost net income caused by adverse publicity about a breach affecting your clients — measured over a 6-month period of recovery after a 14-day waiting period.
Fine print
A detailed proof of loss is due 90 to 150 days after the recovery period ends.
Cryptojacking PBI Group | Arch NetSafe® 2.0 $250,000 90-day calculation period
What it means
Extra electricity, natural gas, oil, or internet costs when a hacker uses your systems to mine cryptocurrency, for up to 90 days.
Court Attendance Expenses PBI Group | Arch NetSafe® 2.0 $100,000 Aggregate
What it means
Reasonable expenses to attend hearings, trials, depositions, and mediation or arbitration in a covered claim, with Arch's consent.
Business Interruption — Network Security Breach PBI Group | Arch NetSafe® 2.0 $1,000,000 Full aggregate · no reducing endorsement
What it means
Lost net income, continuing normal operating costs including payroll, and extra expenses to reduce the loss when a breach interrupts your business — up to the full aggregate.
Waiting Period PBI Group | Arch NetSafe® 2.0 12 hours
What it means
Business interruption loss is paid once an interruption lasts longer than 12 hours.
Period of Recovery PBI Group | Arch NetSafe® 2.0 180 days Extended by endorsement · base form is 30 days
What it means
Lost income is paid until the interruption ends — or would have ended with reasonable diligence — up to 180 days.
System Failure PBI Group | Arch NetSafe® 2.0 $1,000,000 Unintentional, unplanned outages
What it means
Business interruption caused by an unintentional and unplanned outage of your own systems — no hacker required.
Dependent Business Interruption PBI Group | Arch NetSafe® 2.0 $1,000,000 Breach · $250,000 for system failure
What it means
Your lost income when a business you depend on under a written contract — a title vendor, a transaction coordinator, a payment processor that isn't a bank — suffers a breach ($1,000,000) or a system failure ($250,000) that interrupts your operations.
Technology Contractor Business Interruption PBI Group | Arch NetSafe® 2.0 $250,000 Breach · $250,000 for system failure
What it means
Your lost income when a technology provider under written contract — cloud host, SaaS platform, data backup, web host, managed IT — suffers a breach ($250,000) or a system failure ($250,000).
Fine print
Outages at utilities, internet service providers, DNS or certificate providers, and banks are excluded, as are outages caused by fire, flood, and other physical events.
Voluntary Shutdown PBI Group | Arch NetSafe® 2.0 Covered With Arch's prior written consent
What it means
Lost income when you intentionally shut down your systems after discovering a breach — at your firm's, a technology contractor's, or a dependent business's — to limit the damage.
Fine print
The shutdown must be directed by your chief information security officer or equivalent, and requires Arch's prior written consent.
Unsupported / Legacy Systems PBI Group | Arch NetSafe® 2.0 Excluded For the business interruption endorsement coverages
What it means
The business interruption endorsement excludes business interruption loss — from a network security breach or a system failure, on your own systems as well as your vendors' — where the software or hardware has reached end-of-life or end-of-support status, or its vendor support has expired.
Cyber Extortion / Ransomware PBI Group | Arch NetSafe® 2.0 $1,000,000 Full limits · no ransomware sublimit
What it means
Investigation costs and — with Arch's prior written consent — payments to end a threat to attack your systems (a Security Threat) or to publish stolen private information (a Privacy Threat).
Fine print
Any payment must comply with U.S. sanctions law.
Social Engineering (Wire Fraud) PBI Group | Arch NetSafe® 2.0 $250,000 Includes client funds in your care & custody
What it means
Your direct financial loss when someone impersonating a client, vendor, partner, employee, or contractor — or a bank, title company, escrow agent, closing attorney, real estate broker, or mortgage broker — tricks your firm into transferring money or securities.
Client Funds in Your Care, Custody & Control PBI Group | Arch NetSafe® 2.0 Covered Including funds in your trust or escrow account
What it means
Social Engineering and Electronic Transfer Fraud loss is defined to include the loss of a client whose funds are in the care, custody, and control of any insured — including funds held in an account the firm maintains.
Real-Estate-Specific Impersonation Language PBI Group | Arch NetSafe® 2.0 Named Title company, escrow agent, closing attorney, mortgage broker
What it means
The endorsement names the parties fraudsters impersonate in real estate wire fraud — bank, title company, escrow agent, closing attorney, real estate broker, mortgage broker — so there is no argument about whether they count.
Callback / Verification Requirement PBI Group | Arch NetSafe® 2.0 Required Second-channel verification before any transfer
What it means
Social Engineering coverage does not apply if the fraudulent instruction wasn't verified through a method other than the one it arrived by — for example, a callback to a known phone number — before money was sent.
Electronic Transfer Fraud PBI Group | Arch NetSafe® 2.0 $250,000 Includes client funds in your accounts
What it means
Loss when a fraudster impersonating your firm — or your bank, title company, or another named party — sends instructions directly to your financial institution to move money out of your account, including client funds held there.
Invoice Manipulation PBI Group | Arch NetSafe® 2.0 $250,000 Breach or privacy violation · excludes profit
What it means
Your loss when, after a network security breach or a privacy violation, a fraudster sends a fake invoice purporting to come from your firm to a client or vendor, and you can't collect what you were owed for services already provided.
Fine print
The loss is measured excluding your profit on the transaction, and the coverage doesn't apply where the third party's own crime insurance pays. It covers the receivable you couldn't collect — not money you paid out to a vendor for goods or services you never received.
Telephone Fraud PBI Group | Arch NetSafe® 2.0 $250,000
What it means
Long-distance toll charges when your phone or voicemail system is hijacked to place fraudulent calls.
Cyber Crime Aggregate PBI Group | Arch NetSafe® 2.0 $250,000 Combined for all four Cyber Crime coverages
What it means
Social Engineering, Electronic Transfer Fraud, Invoice Manipulation, and Telephone Fraud share one $250,000 aggregate for the policy year, within the Data Incident Response limit.
Fine print
Crime losses involving payment cards or digital currencies, loans, investments, gambling, funds in the custody of a carrier, legal costs, and amounts covered under a third party's crime insurance are excluded.
Escrow, Title & Biometric Data PBI Group | Arch NetSafe® 2.0 No exclusion No escrow, trust account, title, closing, or biometric exclusion
What it means
The policy contains no exclusion targeting escrow, trust account, title, or closing activities, and no biometric data exclusion.
Cyberterrorism / Cyberwarfare PBI Group | Arch NetSafe® 2.0 Covered Cyberterrorism carved back in
What it means
War is excluded, but the exclusion expressly does not apply to cyberterrorism — attacks on computer systems by individuals or groups to further political, ideological, or similar goals, outside of military action.
This summary reflects an actual Arch NetSafe® 2.0 cyber policy issued by Arch Insurance Company through PBI Group to a real estate firm for the 2026–27 term, reviewed page by page in 2026 — the base form, all five coverage parts, and all twelve PBI Group endorsements included. Limits are shown at the $1,000,000 aggregate configuration with full prior acts; a $500,000 aggregate and deductibles of $1,000, $2,500, or $5,000 are also available, and sublimits shown are those on the reviewed placement. Premium varies by firm and is not shown. This page summarizes key terms in plain English and does not restate every provision; coverage is determined by the actual policy language, which controls in every case. Arch®, NetSafe®, and Mullen Coughlin are trademarks of their respective owners; use here is for factual description only.
Want to see how your policy compares?
Send us your current cyber policy — declarations pages, the full form, and every endorsement — and we'll walk you through what's covered, what isn't, and how it stacks up against the program summarized here. No pressure, no obligation.
Request Your Cyber Policy Review
WE RECOMMEND THAT YOU REVIEW ANY PROPOSAL WITH YOUR LEGAL COUNSEL AS PART OF YOUR DECISION MAKING PROCESS. THIS PAGE IS ONLY A HIGHLIGHT OF TERMS AND DOES NOT REPRESENT ALL TERMS IN THE POLICY LANGUAGE. YOU SHOULD MAKE ALL FINAL DETERMINATIONS ABOUT COVERAGE BASED ON THE ACTUAL POLICY LANGUAGE.
You'll be surprised how affordable the best can be.
Let PBI Group get you a quote — no fluff, no pressure, just a fair price for strong coverage.