Search I’ve been hacked Advice Menu

Loss of income after an attack: does cyber insurance pay?

covered Varies by insurer

Business interruption, only after the waiting period. Of 9 business products read: 3 covered, 3 add-on, 1 limited, 2 unclear.

Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue.

As of

On this page
  1. By insurer
  2. In industries

9 answers on the shelf

Each jar is a business product whose terms we read.

9 answers: 3 covered, 3 add-on, 1 limited, 2 unclear AXA, SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»): coveredHelvetia, Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP): coveredChubb, Cyber Enterprise Risk Management (Cyber ERM) V2.2: coveredMobiliar, Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection): add-onZurich, Zurich Cyberversicherung (variants Basic, Optimum, Premium): add-onAIG, CyberEdge: add-onSunrise (AXA), Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others): limitedAllianz Suisse, Cyber Risk Versicherung: unclearVaudoise, Additional cover «Cyber and data protection» to the Business One contents and business liability insurance: unclear
  • covered3
  • add-on3
  • limited1
  • unclear2
  • AXA

    SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)

    covered

    Condition and source: AXA

    Loss of income and additional costs, indemnity period 1 year, waiting period 12 hours. Without a working backup no more than 1 week old, only partial compensation.

    AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A1.2.3, S. 5 · Open document (new window)

  • Sunrise (AXA)

    Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)

    limited Sublimit CHF 20'000

    Condition and source: Sunrise (AXA)

    Waiting period 12 hours, indemnity period max. 1 year, within the first-party sum insured of CHF 20'000; revenue basis max. CHF 5 million.

    Sunrise GmbH, abgerufen 06.11.2026, S. 1, Einschränkungen · Open document (new window)

  • Mobiliar

    Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)

    add-on

    Condition and source: Mobiliar

    Only if mentioned in the policy. Indemnity period max. 12 months, waiting period 12 hours.

    Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B4.3, S. 14 · Open document (new window)

  • Zurich

    Zurich Cyberversicherung (variants Basic, Optimum, Premium)

    add-on

    Condition and source: Zurich

    Only in the Optimum and Premium variants. Indemnity period 12 months; waiting period according to the policy (not public).

    Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 504/505, S. 13 · Open document (new window)

  • Helvetia

    Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)

    covered

    Condition and source: Helvetia

    Loss of profit (EBITDA), waiting period 24 hours, benefit period 12 months; within the first-party sum insured. Deductible = the higher of CHF 1'000 and the loss during the waiting period.

    Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.3, S. 10 · Open document (new window)

  • Allianz Suisse

    Cyber Risk Versicherung

    unclear

    Condition and source: Allianz Suisse

    According to the product page, indemnity period 24 months; waiting period not found.

    Terms not public, quote via BTAG.

    Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

  • Vaudoise

    Additional cover «Cyber and data protection» to the Business One contents and business liability insurance

    unclear

    Condition and source: Vaudoise

    Only advertising text from the product page (data restoration, notification, reputation, extortion «and if necessary the payment of a ransom», business interruption, liability); cyber GTC not public.

    Terms not public, quote via BTAG.

    Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

  • Chubb

    Cyber Enterprise Risk Management (Cyber ERM) V2.2

    covered

    Condition and source: Chubb

    After expiry of the waiting period (set in the policy).

    Terms not public, quote via BTAG.

    Chubb European Group SE, 01/2022, 1.2 · Open document (new window)

  • AIG

    CyberEdge

    add-on

    Condition and source: AIG

    Network interruption as an extension.

    Terms not public, quote via BTAG.

    AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)

6 insurers without a business product we read

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

Where this module comes into play

In 36 scenarios from 23 industries, a cost item concerns this module.

All scenarios with this module
The other 16 modules