Restore data and systems: does cyber insurance pay?

• AXA

  SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)

  covered

  Condition and source: AXA

  Restoring from backup, re-entering the last 7 days, removing malware, reinstallation, licences. Private data max. CHF 5'000 per device and year.

  AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A1.1.3, S. 5 · Open document (new window)

• Sunrise (AXA)

  Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)

  limited Sublimit CHF 20'000

  Condition and source: Sunrise (AXA)

  As AXA basic cover, but first-party losses only up to CHF 20'000 in total per claim.

  Sunrise GmbH, abgerufen 06.11.2026, S. 1, Leistungen · Open document (new window)

• Mobiliar

  Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)

  covered

  Condition and source: Mobiliar

  Restoring lost, encrypted or deleted data and software; also data at an outsourcing service provider with a written contract.

  Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B3.2, S. 13 · Open document (new window)

• Zurich

  Zurich Cyberversicherung (variants Basic, Optimum, Premium)

  covered

  Condition and source: Zurich

  Virus removal, disaster recovery, restoration, reinstallation, functional tests; the network also includes production and control technology.

  Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 104, S. 9 · Open document (new window)

• Helvetia

  Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)

  covered

  Condition and source: Helvetia

  Restoration of data and software, clean-up, additional costs to continue data processing.

  Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.1, S. 9 · Open document (new window)

• Allianz Suisse

  Cyber Risk Versicherung

  unclear

  Condition and source: Allianz Suisse

  According to the product page, data restoration; GTC not public.

  Terms not public, quote via BTAG.

  Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Vaudoise

  Additional cover «Cyber and data protection» to the Business One contents and business liability insurance

  unclear

  Condition and source: Vaudoise

  Only advertising text from the product page (data restoration, notification, reputation, extortion «and if necessary the payment of a ransom», business interruption, liability); cyber GTC not public.

  Terms not public, quote via BTAG.

  Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Chubb

  Cyber Enterprise Risk Management (Cyber ERM) V2.2

  covered

  Condition and source: Chubb

  Data and System Recovery Costs.

  Terms not public, quote via BTAG.

  Chubb European Group SE, 01/2022, 1.3 · Open document (new window)

• AIG

  CyberEdge

  no information

  Condition and source: AIG

  GTC not public.

  Terms not public, quote via BTAG.

  AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)

6 insurers without a business product we read

• Baloise: No more new business under Baloise. The cyber pages of baloise.ch redirect to the Helvetia Cyber-Versicherung; existing contracts continue with Helvetia. Baloise cyber GTC no longer public.
  Where does it say so?

  Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss), abgerufen 06.11.2026, FAQ Neugeschäft

  «Neue Verträge werden immer im Namen von Helvetia ausgestellt.»

  Open document: Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss) (opens in a new window), retrieved 06.11.2026

• Generali: No cyber insurance for companies found (private customers only). For companies there is «internet legal protection» as a module of business legal protection (up to CHF 100'000 Switzerland / 50'000 worldwide, without deductible). This is legal protection, not cyber insurance.
  Where does it say so?

  Internetrechtsschutz für Unternehmen (Produktseite), abgerufen 06.11.2026

  «Deckung bis CHF 100'000 in der Schweiz»

  Open document: Internetrechtsschutz für Unternehmen (Produktseite) (opens in a new window), retrieved 06.11.2026

• Liberty: Cyber risks are underwritten (underwriters in Zürich); product page and GTC (according to VZ «Cyber Risk Versicherung 2015-09») not public. The 2015 edition is older than today’s war and infrastructure clauses.
  Where does it say so?

  Facts & Contacts Schweiz, 07/2022

  Open document: Facts & Contacts Schweiz (opens in a new window), retrieved 06.11.2026

• Hiscox: No offer found in Switzerland: country list without Switzerland; hiscox.de conditions apply only to Germany/Austria.
  Where does it say so?

  Hiscox in your country (Länderliste), abgerufen 06.11.2026

  Open document: Hiscox in your country (Länderliste) (opens in a new window), retrieved 06.11.2026

• smile: No cyber insurance for companies (products: car, household, motorcycle, travel, legal protection, death).
  Where does it say so?

  smile Produktübersicht, abgerufen 06.11.2026

  Open document: smile Produktübersicht (opens in a new window), retrieved 06.11.2026

• Simpego: No cyber insurance for companies found.
  Where does it say so?

  Simpego Produktübersicht, abgerufen 06.11.2026

  Open document: Simpego Produktübersicht (opens in a new window), retrieved 06.11.2026

In 45 scenarios from 23 industries, a cost item concerns this module.

All scenarios with this module

• Butcher’s shop
  • Refrigeration system manipulated, goods spoiled covered
  • Server encrypted, scales without prices, deliveries delayed covered
• Bakery and confectionery
  • Proofer and freezer room changed via remote maintenance covered
  • Ransomware paralyses all branch tills covered
  • Price screens show propaganda covered
• Restaurant and catering
  • Till and reservations gone on Saturday evening due to ransomware covered
  • Cold room heated up via remote maintenance covered
• Hotel and accommodation
  • Ransomware locks hotel software and room cards covered
  • Telephone system misused for international calls covered
• Trades (electrical, plumbing, joinery, painting)
  • Logged in via VPN on a Sunday, server encrypted covered
  • Joinery’s CNC machine manipulated covered
• Construction company
  • Project data and cost calculations encrypted covered
• Garage and car dealership
  • Ransomware with published customer data covered
• Medical practice
  • Patient data encrypted and published covered
  • Ultrasound PC with old Windows infected covered
• Dental practice
  • Ransomware closes the practice for two weeks covered
  • X-ray PC without updates becomes the point of entry covered
• Physiotherapy
  • Ransomware on the practice server covered
• Pharmacy and drugstore
  • Pharmacy software encrypted on Friday afternoon covered
  • Temperature in the medicine refrigerator changed covered
• Fiduciary services
  • Trojan diverts client funds covered
• Law firm and notary’s office
  • Encrypted files, missed deadline covered
• Architectural and engineering office
  • Plans encrypted, construction site waiting covered
  • Cloud storage configured to be open covered
  • Calculation data changed unnoticed limited
• Retail (shop)
  • Till blocked by ransomware covered
  • Refrigerated shelves heated up overnight covered
• Hairdresser, beauty salon, nail studio
  • Appointment calendar encrypted, no backups covered
  • Instagram account taken over and held to ransom covered
• Agriculture
  • Milking robot and barn climate disrupted covered
  • Ventilation control in the pig barn manipulated covered
• Transport and logistics
  • Dispatching encrypted, lorries at a standstill covered
  • Cold chain logistics without IT covered
• Production and industrial SMEs
  • ERP encrypted, production at a standstill for a month covered
  • Remote access stops machines for five days covered
  • Machine parameters changed, series defective covered
  • Design data stolen not covered
• Property management
  • Tenant data encrypted and copied covered
  • Heating of a housing development switched off via remote access covered
• Association and foundation
  • Foundation encrypted, data on the darknet covered
  • Association’s Instagram account taken over covered
• Municipality and public administration
  • Ransomware, residents’ data on the darknet covered
  • Water supply control system attacked covered
• IT service provider and software company
  • Own systems encrypted, customer data published limited
  • Fake helpdesk via Teams covered

The other 16 modules

• Immediate help in an emergency
• Replace unusable devices
• Loss of income after an attack
• Outage at the IT provider
• Outage due to operating error
• Cyber extortion
• Third-party claims after a data breach
• Proceedings before authorities
• Inform affected people
• Fraud with fake instructions
• Hacked e-banking
• Phone hacking and extra costs
• Property damage caused by an attack
• Reputational damage
• Card industry penalties
• Media liability