Loss of income after an attack: does cyber insurance pay?
covered Varies by insurer
Business interruption, only after the waiting period. Of 9 business products read: 3 covered, 3 add-on, 1 limited, 2 unclear.
Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue.
As of
On this page
9 answers on the shelf
Each jar is a business product whose terms we read.
- covered3
- add-on3
- limited1
- unclear2
-
SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)
covered
Condition and source: AXA
Loss of income and additional costs, indemnity period 1 year, waiting period 12 hours. Without a working backup no more than 1 week old, only partial compensation.
AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A1.2.3, S. 5 · Open document (new window)
-
Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)
limited Sublimit CHF 20'000
Condition and source: Sunrise (AXA)
Waiting period 12 hours, indemnity period max. 1 year, within the first-party sum insured of CHF 20'000; revenue basis max. CHF 5 million.
Sunrise GmbH, abgerufen 06.11.2026, S. 1, Einschränkungen · Open document (new window)
-
Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)
add-on
Condition and source: Mobiliar
Only if mentioned in the policy. Indemnity period max. 12 months, waiting period 12 hours.
Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B4.3, S. 14 · Open document (new window)
-
Zurich Cyberversicherung (variants Basic, Optimum, Premium)
add-on
Condition and source: Zurich
Only in the Optimum and Premium variants. Indemnity period 12 months; waiting period according to the policy (not public).
Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 504/505, S. 13 · Open document (new window)
-
Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)
covered
Condition and source: Helvetia
Loss of profit (EBITDA), waiting period 24 hours, benefit period 12 months; within the first-party sum insured. Deductible = the higher of CHF 1'000 and the loss during the waiting period.
Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.3, S. 10 · Open document (new window)
-
Cyber Risk Versicherung
unclear
Condition and source: Allianz Suisse
According to the product page, indemnity period 24 months; waiting period not found.
Terms not public, quote via BTAG.
Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)
-
Additional cover «Cyber and data protection» to the Business One contents and business liability insurance
unclear
Condition and source: Vaudoise
Only advertising text from the product page (data restoration, notification, reputation, extortion «and if necessary the payment of a ransom», business interruption, liability); cyber GTC not public.
Terms not public, quote via BTAG.
Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)
-
Cyber Enterprise Risk Management (Cyber ERM) V2.2
covered
Condition and source: Chubb
After expiry of the waiting period (set in the policy).
Terms not public, quote via BTAG.
Chubb European Group SE, 01/2022, 1.2 · Open document (new window)
-
CyberEdge
add-on
Condition and source: AIG
Network interruption as an extension.
Terms not public, quote via BTAG.
AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)
6 insurers without a business product we read
- Baloise: No more new business under Baloise. The cyber pages of baloise.ch redirect to the Helvetia Cyber-Versicherung; existing contracts continue with Helvetia. Baloise cyber GTC no longer public.
Where does it say so?
Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss), abgerufen 06.11.2026, FAQ Neugeschäft
«Neue Verträge werden immer im Namen von Helvetia ausgestellt.»
Open document: Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss) (opens in a new window), retrieved 06.11.2026
- Generali: No cyber insurance for companies found (private customers only). For companies there is «internet legal protection» as a module of business legal protection (up to CHF 100'000 Switzerland / 50'000 worldwide, without deductible). This is legal protection, not cyber insurance.
Where does it say so?
Internetrechtsschutz für Unternehmen (Produktseite), abgerufen 06.11.2026
«Deckung bis CHF 100'000 in der Schweiz»
Open document: Internetrechtsschutz für Unternehmen (Produktseite) (opens in a new window), retrieved 06.11.2026
- Liberty: Cyber risks are underwritten (underwriters in Zürich); product page and GTC (according to VZ «Cyber Risk Versicherung 2015-09») not public. The 2015 edition is older than today’s war and infrastructure clauses.
Where does it say so?
Facts & Contacts Schweiz, 07/2022
Open document: Facts & Contacts Schweiz (opens in a new window), retrieved 06.11.2026
- Hiscox: No offer found in Switzerland: country list without Switzerland; hiscox.de conditions apply only to Germany/Austria.
Where does it say so?
Hiscox in your country (Länderliste), abgerufen 06.11.2026
Open document: Hiscox in your country (Länderliste) (opens in a new window), retrieved 06.11.2026
- smile: No cyber insurance for companies (products: car, household, motorcycle, travel, legal protection, death).
Where does it say so?
smile Produktübersicht, abgerufen 06.11.2026
Open document: smile Produktübersicht (opens in a new window), retrieved 06.11.2026
- Simpego: No cyber insurance for companies found.
Where does it say so?
Simpego Produktübersicht, abgerufen 06.11.2026
Open document: Simpego Produktübersicht (opens in a new window), retrieved 06.11.2026
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
Where this module comes into play
In 36 scenarios from 23 industries, a cost item concerns this module.
All scenarios with this module
- Butcher’s shop
- Bakery and confectionery
- Restaurant and catering
- Hotel and accommodation
- Trades (electrical, plumbing, joinery, painting)
- Construction company
- Payment to subcontractor into the wrong account not covered
- Garage and car dealership
- Medical practice
- Dental practice
- Physiotherapy
- Pharmacy and drugstore
- Fiduciary services
- Law firm and notary’s office
- Encrypted files, missed deadline limited
- Architectural and engineering office
- Retail (shop)
- Till blocked by ransomware limited
- Refrigerated shelves heated up overnight not covered
- Webshop paralysed during the Christmas period limited
- Online shop
- Hairdresser, beauty salon, nail studio
- Agriculture
- Transport and logistics
- Production and industrial SMEs
- Property management
- Tenant data encrypted and copied limited
- Association and foundation
- Municipality and public administration
The other 16 modules
- Immediate help in an emergency
- Restore data and systems
- Replace unusable devices
- Outage at the IT provider
- Outage due to operating error
- Cyber extortion
- Third-party claims after a data breach
- Proceedings before authorities
- Inform affected people
- Fraud with fake instructions
- Hacked e-banking
- Phone hacking and extra costs
- Property damage caused by an attack
- Reputational damage
- Card industry penalties
- Media liability