Card industry penalties: does cyber insurance pay?

• AXA

  SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)

  not covered

  Condition and source: AXA

  Contractual penalties and fines excluded (B4), as is card misuse (B11).

  AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. B4, S. 12 · Open document (new window)

• Sunrise (AXA)

  Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)

  not covered

  Condition and source: Sunrise (AXA)

  Contractual penalties and fines excluded (B4), as is card misuse (B11).

  AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. B4, S. 12 · Open document (new window)

• Mobiliar

  Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)

  add-on

  Condition and source: Mobiliar

  Add-on «Breach of PCI-DS standards»: investigation by an accredited assessor, recertification; valid PCI-DSS certification required.

  Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B6, S. 15 · Open document (new window)

• Zurich

  Zurich Cyberversicherung (variants Basic, Optimum, Premium)

  covered

  Condition and source: Zurich

  Payments, penalties and fines of the PCI Security Standards Council, where insurable (exception to the fines exclusion).

  Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 304, S. 10 · Open document (new window)

• Helvetia

  Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)

  covered

  Condition and source: Helvetia

  Fines and penalties of the PCI Security Standards Council, where insurable, plus recertification.

  Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.4 lit. e, S. 11 · Open document (new window)

• Allianz Suisse

  Cyber Risk Versicherung

  unclear

  Condition and source: Allianz Suisse

  The product page names «e-payment/contractual penalties».

  Terms not public, quote via BTAG.

  Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Vaudoise

  Additional cover «Cyber and data protection» to the Business One contents and business liability insurance

  no information

  Condition and source: Vaudoise

  Cyber GTC not public, no information found.

  Terms not public, quote via BTAG.

  Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Chubb

  Cyber Enterprise Risk Management (Cyber ERM) V2.2

  limited

  Condition and source: Chubb

  Payment Card Loss with a sub-limit.

  Terms not public, quote via BTAG.

  Chubb European Group SE, 01/2022, 3.49 · Open document (new window)

• AIG

  CyberEdge

  no information

  Condition and source: AIG

  GTC not public.

  Terms not public, quote via BTAG.

  AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)

6 insurers without a business product we read

• Baloise: No more new business under Baloise. The cyber pages of baloise.ch redirect to the Helvetia Cyber-Versicherung; existing contracts continue with Helvetia. Baloise cyber GTC no longer public.
  Where does it say so?

  Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss), abgerufen 06.11.2026, FAQ Neugeschäft

  «Neue Verträge werden immer im Namen von Helvetia ausgestellt.»

  Open document: Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss) (opens in a new window), retrieved 06.11.2026

• Generali: No cyber insurance for companies found (private customers only). For companies there is «internet legal protection» as a module of business legal protection (up to CHF 100'000 Switzerland / 50'000 worldwide, without deductible). This is legal protection, not cyber insurance.
  Where does it say so?

  Internetrechtsschutz für Unternehmen (Produktseite), abgerufen 06.11.2026

  «Deckung bis CHF 100'000 in der Schweiz»

  Open document: Internetrechtsschutz für Unternehmen (Produktseite) (opens in a new window), retrieved 06.11.2026

• Liberty: Cyber risks are underwritten (underwriters in Zürich); product page and GTC (according to VZ «Cyber Risk Versicherung 2015-09») not public. The 2015 edition is older than today’s war and infrastructure clauses.
  Where does it say so?

  Facts & Contacts Schweiz, 07/2022

  Open document: Facts & Contacts Schweiz (opens in a new window), retrieved 06.11.2026

• Hiscox: No offer found in Switzerland: country list without Switzerland; hiscox.de conditions apply only to Germany/Austria.
  Where does it say so?

  Hiscox in your country (Länderliste), abgerufen 06.11.2026

  Open document: Hiscox in your country (Länderliste) (opens in a new window), retrieved 06.11.2026

• smile: No cyber insurance for companies (products: car, household, motorcycle, travel, legal protection, death).
  Where does it say so?

  smile Produktübersicht, abgerufen 06.11.2026

  Open document: smile Produktübersicht (opens in a new window), retrieved 06.11.2026

• Simpego: No cyber insurance for companies found.
  Where does it say so?

  Simpego Produktübersicht, abgerufen 06.11.2026

  Open document: Simpego Produktübersicht (opens in a new window), retrieved 06.11.2026

In 4 scenarios from 3 industries, a cost item concerns this module.

All scenarios with this module

• Restaurant and catering
  • Fake card payment in the takeaway shop limited
• Retail (shop)
  • Manipulated card terminal limited
  • Break-in via the air conditioning technician’s access limited
• Online shop
  • Card data stolen in the shop (skimming) limited

The other 16 modules

• Immediate help in an emergency
• Restore data and systems
• Replace unusable devices
• Loss of income after an attack
• Outage at the IT provider
• Outage due to operating error
• Cyber extortion
• Third-party claims after a data breach
• Proceedings before authorities
• Inform affected people
• Fraud with fake instructions
• Hacked e-banking
• Phone hacking and extra costs
• Property damage caused by an attack
• Reputational damage
• Media liability