CRC says US SME cyber renewal prices rose 7.5% in September

CRC Group said US small and midsize business cyber pricing had reached a floor after average renewal prices rose 7.5% in September, creating a contrast with continuing reductions in reinsurance pricing.

The wholesaler's Cyber REDY Index for the third quarter showed the September 2026 increase as the highest bar in its chart covering July 2025 to September 2026. The corresponding figure for September 2025 was a 0.4% fall.

"The small and midsize enterprise (SME) market appears to have reached its pricing floor, with rate increases becoming more pronounced," CRC said.

Broker data for the wider market points the other way. Marsh said on 21 October that global cyber rates fell 4% in the third quarter, the thirteenth straight quarterly decline, with US rates flat (Marsh). UK commercial rates fell 8% in the same index.

CRC said cyber claims frequency and severity had reached record levels, contributing to the upward pressure on primary prices. Manufacturing, healthcare and law firms were experiencing some of the most significant pressure.

The report also identified a change in attackers' methods. CRC said cyber criminals were increasingly moving away from email-based attacks and using remote access to compromise networks.

Pricing for the underlying risk is moving in the opposite direction from the protection bought by insurers. CRC said reinsurance renewal pricing continued to decline and recent renewals had produced further rate reductions.

It added: "Whether this upward movement in primary pricing continues following January 1 remains to be seen."

The index also noted that AI-related exclusions were becoming more common in standard forms, including ISO and commercial general liability cover. CRC said cyber and technology errors and omissions policies continued to develop in response to emerging exposures.

CRC limits the REDY Index to brokerage accounts renewed in the same month as the previous year and carrying the same total account limits. It removes the top and bottom 1% of accounts by year-on-year price change and by rate on line.

The company does not disclose the number of accounts in the sample. It describes the analysis as educational and publishes the index monthly.

CRC says it places more than $33bn of annual premium and works with more than 650 carriers. It describes itself as an independent wholesale and underwriting distributor.

Related coverage: Brit adds cyber to Acturis Package for brokers at commercial renewal and Old Mutual says provider error may have exposed customer phone numbers.

Sources

• CRC Group: Q3 2026 Cyber REDY Index (PDF)
• CRC Group
• Marsh: Global commercial insurance rates fall 5% in Q3 2026

CoverWire is a news and information service. Nothing here is investment advice.