Cyber extortion: does cyber insurance pay?

Important: The status applies to help with extortion, that is, experts and negotiation. Whether an insurer also pays a ransom is shown below under “Ransom” and in each product’s condition.

• AXA

  SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)

  add-on

  Condition and source: AXA

  Restoration after ransomware is part of the basic cover (A1.1.2). Ransom is excluded in the GTC 06.2024 (B13); the factsheet offers «Cybererpressung» including ransom as an extension. The conditions of this extension are not public.

  AXA Versicherungen AG, undatiert, abgerufen 06.11.2026, S. 1, Ziff. 2 · Open document (new window)

• Sunrise (AXA)

  Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)

  not covered

  Condition and source: Sunrise (AXA)

  Ransom excluded; restoration after ransomware covered within the first-party sum insured. No extension offered.

  AXA Versicherungen AG / Sunrise GmbH, Ausgabe 05.2026 (Datei «vsept26»), Teil C, Allgemeine Ausschlüsse, S. 16 · Open document (new window)

• Mobiliar

  Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)

  add-on

  Condition and source: Mobiliar

  Only if mentioned in the policy: expert, travel, security service provider. Ransom expressly not insured; reporting to the police is mandatory.

  Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B5.2, S. 15 · Open document (new window)

• Zurich

  Zurich Cyberversicherung (variants Basic, Optimum, Premium)

  limited

  Condition and source: Zurich

  Ransom reimbursed where permissible, max. one payment per event, within a sub-limit of 25% of the first-party sum insured, after consent; filing a criminal complaint is mandatory.

  Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 104, S. 9 · Open document (new window)

• Helvetia

  Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)

  limited Sublimit CHF 30'000

  Condition and source: Helvetia

  Ransom is paid where insurable; sub-limit ECO 30'000, SMART 50'000, TOP 100'000; reporting to the police is mandatory.

  Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.7 lit. c, S. 11 · Open document (new window)

• Allianz Suisse

  Cyber Risk Versicherung

  unclear

  Condition and source: Allianz Suisse

  The product page names «cyber extortion»; whether ransom is paid was not found.

  Terms not public, quote via BTAG.

  Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Vaudoise

  Additional cover «Cyber and data protection» to the Business One contents and business liability insurance

  unclear

  Condition and source: Vaudoise

  Only advertising text from the product page (data restoration, notification, reputation, extortion «and if necessary the payment of a ransom», business interruption, liability); cyber GTC not public.

  Terms not public, quote via BTAG.

  Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Chubb

  Cyber Enterprise Risk Management (Cyber ERM) V2.2

  covered

  Condition and source: Chubb

  Ransom including cryptocurrency, where permissible and insurable; sub-limit/deductible possible.

  Terms not public, quote via BTAG.

  Chubb European Group SE, 01/2022, 3.15 · Open document (new window)

• AIG

  CyberEdge

  add-on

  Condition and source: AIG

  Extortion as an extension.

  Terms not public, quote via BTAG.

  AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)

1. 1

   Ransom:Mobiliar and Sunrise never pay, AXA only with the «Cybererpressung» extension, Zurich within the sub-limit of 25% of the first-party sum insured, Helvetia CHF 30'000–100'000; reporting to the police is mandatory.

   Where does it say so?

   Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2024, Art. 10.1, S. 7

   «Bei sämtlichen Ransomware-Attacken muss eine Strafanzeige bei der Polizei eingereicht werden.»

   Open document: Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB) (opens in a new window), retrieved 06.11.2026

2. 2

   Criminal complaint:for ransomware (Zurich Art. 10.1), extortion (Mobiliar, Helvetia) and cyber fraud (Helvetia 3.3.1.8), reporting to the police is a precondition for the benefit.

   Where does it say so?

   Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial), Ausgabe Juni 2026, Ziff. 3.3.1.8

   «sofern eine Strafanzeige erstattet wird»

   Open document: Allgemeine Versicherungsbedingungen Helvetia Cyber-Versicherung (Musterwording KMU-Spezial) (opens in a new window), retrieved 06.11.2026

In 15 scenarios from 14 industries, a cost item concerns this module.