Willis launches CyMax Facility, a primary and excess facility aimed at SMEs and middle market companies in the EMEA region

Willis (NASDAQ:WTW) has expanded its CyMax Facility, a primary and excess cyber insurance facility for SMEs and middle market companies across EMEA.

Rhea-AI Summary

Willis (NASDAQ:WTW) has expanded its CyMax Facility, a primary and excess cyber insurance facility for SMEs and middle market companies across EMEA. The renewed offering adds panel-based capacity with AXA XL, Beazley, HDI Global and Markel, higher limits, broader eligibility and faster placement.

Key features include a one-page application, pre-agreed pricing grids, eligibility for companies with turnover up to €/CHF500m, proprietary CyCore wordings aligned with GDPR, NIS2 and DORA, and access to specialist pre- and post-breach cyber services.

Argus Jul 1 session

+5.23% close to close Open Argus

Details

News Market Reaction – WTW

On Jul 1, the day this news came out, WTW closed 5.23% above the previous close.

Data tracked by StockTitan Argus for the Jul 1 session.

Key Figures

Turnover eligibility cap: €/CHF500m Application form length: One-page Underwriting questions: 6–8 questions

Turnover eligibility cap

€/CHF500m

Maximum turnover for companies eligible for the CyMax Facility

Application form length

One-page

Cyber Application Form for accessing CyMax Facility coverage

Underwriting questions

6–8 questions

Short eligibility questionnaire for CyMax Facility applicants

Historical Context

5 past events · Latest: Jun 16

5 events

1. Jun 16

   Cyber claims study

   24h Move

   +0.7%

   Report showing cyber insurance covering most average breach and first‑party losses.

2. Jun 15

   Climate risk tech

   24h Move

   -1.8%

   Launch of enhanced Climate Diagnostic model within Risk IQ platform.

3. Jun 11

   Construction risk program

   24h Move

   -1.2%

   New builder’s risk facility for wood frame construction projects in the U.S.

4. Jun 11

   Rate trend survey

   24h Move

   -1.2%

   CLIPS data showing moderating 2.5% increase in U.S. commercial rates.

5. Jun 09

   AI workplace study

   24h Move

   +0.9%

   Global study on AI, employee experience and business performance metrics.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Key Terms

ransomware, social engineering, contingent business interruption, gdpr, +2 more

6 terms

ransomware technical

"exposures ranging from data breaches and ransomware to supply chain risks"

Ransomware is malicious software that locks or encrypts a company’s computer files and systems, then demands payment for their release — like a thief changing the locks on a business and asking for a ransom. It matters to investors because attacks can halt operations, trigger large cleanup costs, damage customer trust, lead to regulatory fines or legal claims, and reduce future revenue, all of which can hurt a company’s financial value.

social engineering technical

"cover for evolving threats such as social engineering, telephone hacking and invoice manipulation"

Social engineering is the practice of manipulating people into revealing confidential information, granting access, or taking actions that compromise security, often by posing as a trusted person or using urgent, persuasive stories. For investors it matters because these scams can lead to direct financial loss, theft of sensitive corporate data, disrupted operations, or damage to a company’s reputation — similar to a con artist who tricks a business into handing over its keys.

contingent business interruption technical

"business interruption and contingent business interruption, regulatory action, social engineering"

Contingent business interruption is insurance that pays for a company’s lost revenue when a disruption happens not to the company itself but to a key supplier, customer, or service provider whose outage prevents the company from operating—think of it as covering the ripple effect when a supplier’s shutdown stops your factory. Investors care because this protection can preserve cash flow and earnings after external shocks, reducing downside risk to valuation and creditworthiness, though coverage terms and claim outcomes can be complex.

gdpr regulatory

"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"

General Data Protection Regulation is a law that sets rules for how organizations must collect, store and use personal data about people, and gives individuals rights over that data. It matters to investors because noncompliance can lead to large fines, higher operating costs and damaged reputation, while strong compliance can be a competitive advantage—think of it as a strict safety code for handling customer information.

nis2 regulatory

"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"

NIS2 is a European Union cybersecurity law that sets mandatory rules for how many businesses and public organizations must protect their networks, report cyber incidents, and undergo checks. Think of it as a requirement to install stronger locks, keep a log of any break-ins, and show auditors the keys; for investors, compliance affects a company’s legal risk, operating costs and reputation, and can influence future cash flow and valuation.

dora regulatory

"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"

The EU Digital Operational Resilience Act (DORA) is a law that requires banks, asset managers, insurers and other financial firms to strengthen how they prevent, detect and report problems with information technology and third‑party service providers. It matters to investors because it raises standards for cybersecurity and incident disclosure, which can change a firm’s costs, reduce unexpected outages or losses, and make operational risks easier to compare—like forcing buildings to meet safety codes so occupants and insurers can better judge risk.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

LONDON, July 01, 2026 (GLOBE NEWSWIRE) -- Willis, a WTW business (NASDAQ:WTW), today announced the expansion of its CyMax Facility, a primary and excess cyber facility designed specifically for SMEs and middle market companies across EMEA, in partnership with Insurers AXA XL, Beazley, HDI Global and Markel.

Building on the success of its previous Continental Europe facility, the renewed offering provides broader access, higher limits and faster execution for eligible companies seeking comprehensive cyber protection. It is designed to streamline the insurance experience for clients and brokers, while supporting companies facing exposures ranging from data breaches and ransomware to supply chain risks.

The cover supports clients through crisis management and incident response, with access to external expertise when a cyber event occurs. It also provides financial protection for business interruption and supply chain losses, alongside cover for evolving threats such as social engineering, telephone hacking and invoice manipulation, helping protect profitability, continuity and reputation.

Key features:

• Panel-based capacity: The CyMax Facility has been expanded from a single-insurer model to a panel-based facility, supporting broader insurer participation and more flexible placement options for SMEs and middle market companies.
• Simplified application process: A one-page Cyber Application Form and short eligibility questionnaire of six to eight underwriting questions helps streamline access to cover and reduce administrative burden for clients and brokers.
• Broader and more inclusive eligibility: The facility is designed for companies with turnover up to €/CHF500m, who have established security controls, while also providing access to coverage for businesses with partially implemented controls in place.
• Pre-agreed pricing grids: Pre-agreed pricing grids reduce the need for back-and-forth discussions with insurers, helping clients and brokers secure terms more efficiently.
• Willis Cyber proprietary wordings: Clients benefit from WTW’s EMEA CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA, with innovative coverages such as cyber incident response, notification costs to data subjects and regulators, emergency costs, business interruption and contingent business interruption, regulatory action, social engineering, cyber theft, invoice manipulation and reputation harm.
• Specialist cyber support: Clients can access EMEA expertise and insurer pre- and post-breach services, including pre-ransomware alerts, threat intelligence reports, onboarding calls and crisis exercises.

Brian Vosloh, Head of Cyber EMEA at Willis, said: “As cyber risks continue to grow in complexity, SMEs and middle market companies need cyber insurance solutions that are easier to access, quicker to place and better aligned to their evolving exposures.”

“By renewing and expanding Willis’ CyMax Facility, we are giving clients broader access to capacity, higher limits, innovative proprietary coverages and a faster, simpler route to cyber insurance. The use of pre-agreed pricing grids, a streamlined application process and a single vulnerability-scan subjectivity helps reduce friction for brokers and clients, while access to pre- and post-breach services offered by insurers supports stronger cyber resilience.”

About WTW

At WTW (NASDAQ: WTW), we provide data-driven, insight-led solutions in the areas of people, risk and capital. Leveraging the global view and local expertise of our colleagues serving 140 countries and markets, we help organizations sharpen their strategy, enhance organizational resilience, motivate their workforce and maximize performance.

Working shoulder to shoulder with our clients, we uncover opportunities for sustainable success—and provide perspective that moves you. Learn more at wtwco.com.

Media Contact

Jo Barrett
jo.barrett@wtwco.com
+44 (0)7940 703911

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What is Willis (NASDAQ:WTW) CyMax Facility and who is it designed for?

CyMax Facility is a primary and excess cyber insurance solution for SMEs and middle market companies across EMEA. According to Willis, it targets businesses facing risks like data breaches, ransomware and supply chain disruption, offering crisis management, financial protection and tailored cyber coverages.

What are the key features of the expanded CyMax Facility announced on July 1, 2026 by WTW?

The expanded CyMax Facility offers panel-based capacity, higher limits and faster execution. According to Willis, it adds a one-page Cyber Application Form, pre-agreed pricing grids, broader eligibility up to €/CHF500m turnover and proprietary CyCore wordings aligned with GDPR, NIS2 and DORA requirements.

Which insurers participate in the Willis CyMax Facility for SMEs in EMEA?

The CyMax Facility operates as a panel-based cyber insurance solution with multiple insurers. According to Willis, participating insurers include AXA XL, Beazley, HDI Global and Markel, supporting broader capacity, flexible placements and improved access to cyber insurance for SMEs and middle market companies.

What cyber risks and coverages does the WTW CyMax Facility provide for clients?

CyMax Facility covers exposures from data breaches, ransomware and supply chain disruption. According to Willis, coverages include cyber incident response, notification costs, emergency costs, business interruption, contingent business interruption, regulatory action, social engineering, cyber theft, telephone hacking, invoice manipulation and reputation harm for eligible companies.

How does the CyMax Facility simplify the cyber insurance application process for WTW clients?

CyMax Facility uses a streamlined process built around a one-page Cyber Application Form. According to Willis, a brief eligibility questionnaire with six to eight underwriting questions plus pre-agreed pricing grids reduces administrative burden and back-and-forth, helping clients and brokers secure terms more efficiently.

How does Willis CyMax Facility support cyber resilience before and after a breach?

CyMax Facility combines insurance cover with specialist cyber support services. According to Willis, clients gain access to EMEA cyber expertise, insurer pre- and post-breach services, including pre-ransomware alerts, threat intelligence reports, onboarding calls, crisis exercises and incident response support when a cyber event occurs.