Immediate help in an emergency: does cyber insurance pay?

• AXA

  SME insurance, cyber insurance module (same content: «Cyberversicherung Unternehmen»)

  covered Sublimit CHF 5'000

  Condition and source: AXA

  Immediate measures by a specialist provided by AXA without prior consultation up to CHF 5'000, without deductible; crisis consulting and crisis PR by agreement. 24/7 hotline according to the factsheet.

  AXA Versicherungen AG, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A3.1, S. 8 · Open document (new window)

• Sunrise (AXA)

  Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)

  covered Sublimit CHF 5'000

  Condition and source: Sunrise (AXA)

  Initial immediate measures up to CHF 5'000 without deductible and without being counted towards the sum insured; crisis management up to CHF 20'000 within the first-party sum insured.

  Sunrise GmbH, abgerufen 06.11.2026, S. 1, Leistungen · Open document (new window)

• Mobiliar

  Cyber insurance for companies (first-party loss, third-party loss, assistance, IT Assistance, legal protection)

  covered

  Condition and source: Mobiliar

  IT expertise/forensics, crisis management and PR (3 months), 24 h assistance, IT Assistance; cyber legal protection of CHF 50'000 included. PR without prior consent only up to CHF 10'000.

  Schweizerische Mobiliar Versicherungsgesellschaft AG, Ausgabe 01.2024, Ziff. B3.1 und B3.7, S. 13 · Open document (new window)

• Zurich

  Zurich Cyberversicherung (variants Basic, Optimum, Premium)

  covered

  Condition and source: Zurich

  Cyber hotline; an external IT service provider must be called in; forensics in module A. Crisis management (C) only after a data protection breach, PR within a sub-limit of 25% of the first-party sum insured.

  Zürich Versicherungs-Gesellschaft AG, Ausgabe 01/2024 (ZH9513d-2402), Art. 104 und Art. 10, S. 6–9 · Open document (new window)

• Helvetia

  Helvetia Cyber-Versicherung – KMU-Spezial (variants ECO, SMART, TOP)

  covered

  Condition and source: Helvetia

  Emergency assistance, loss analysis/forensics, crisis and PR consulting; emergency assistance without deductible and without being counted towards the sum insured.

  Helvetia Schweizerische Versicherungsgesellschaft AG, Ausgabe Juni 2026 (Dokument 01.07.2026, CH00TLV), Ziff. 3.3.1.4, S. 10 · Open document (new window)

• Allianz Suisse

  Cyber Risk Versicherung

  unclear

  Condition and source: Allianz Suisse

  The product page names forensics, information costs, crisis communication; GTC not public.

  Terms not public, quote via BTAG.

  Allianz Suisse Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Vaudoise

  Additional cover «Cyber and data protection» to the Business One contents and business liability insurance

  unclear

  Condition and source: Vaudoise

  Only advertising text from the product page (data restoration, notification, reputation, extortion «and if necessary the payment of a ransom», business interruption, liability); cyber GTC not public.

  Terms not public, quote via BTAG.

  Vaudoise Allgemeine Versicherungs-Gesellschaft AG, abgerufen 06.11.2026 · Open document (new window)

• Chubb

  Cyber Enterprise Risk Management (Cyber ERM) V2.2

  covered

  Condition and source: Chubb

  Incident response including emergency phase of the first 48 hours.

  Terms not public, quote via BTAG.

  Chubb European Group SE, 01/2022, Insuring Agreement 1.1 · Open document (new window)

• AIG

  CyberEdge

  covered

  Condition and source: AIG

  According to the product page, IT forensics.

  Terms not public, quote via BTAG.

  AIG Europe S.A., Zweigniederlassung Opfikon, geändert 20.08.2026 · Open document (new window)

6 insurers without a business product we read

• Baloise: No more new business under Baloise. The cyber pages of baloise.ch redirect to the Helvetia Cyber-Versicherung; existing contracts continue with Helvetia. Baloise cyber GTC no longer public.
  Where does it say so?

  Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss), abgerufen 06.11.2026, FAQ Neugeschäft

  «Neue Verträge werden immer im Namen von Helvetia ausgestellt.»

  Open document: Helvetia und Baloise sind jetzt eins (FAQ Zusammenschluss) (opens in a new window), retrieved 06.11.2026

• Generali: No cyber insurance for companies found (private customers only). For companies there is «internet legal protection» as a module of business legal protection (up to CHF 100'000 Switzerland / 50'000 worldwide, without deductible). This is legal protection, not cyber insurance.
  Where does it say so?

  Internetrechtsschutz für Unternehmen (Produktseite), abgerufen 06.11.2026

  «Deckung bis CHF 100'000 in der Schweiz»

  Open document: Internetrechtsschutz für Unternehmen (Produktseite) (opens in a new window), retrieved 06.11.2026

• Liberty: Cyber risks are underwritten (underwriters in Zürich); product page and GTC (according to VZ «Cyber Risk Versicherung 2015-09») not public. The 2015 edition is older than today’s war and infrastructure clauses.
  Where does it say so?

  Facts & Contacts Schweiz, 07/2022

  Open document: Facts & Contacts Schweiz (opens in a new window), retrieved 06.11.2026

• Hiscox: No offer found in Switzerland: country list without Switzerland; hiscox.de conditions apply only to Germany/Austria.
  Where does it say so?

  Hiscox in your country (Länderliste), abgerufen 06.11.2026

  Open document: Hiscox in your country (Länderliste) (opens in a new window), retrieved 06.11.2026

• smile: No cyber insurance for companies (products: car, household, motorcycle, travel, legal protection, death).
  Where does it say so?

  smile Produktübersicht, abgerufen 06.11.2026

  Open document: smile Produktübersicht (opens in a new window), retrieved 06.11.2026

• Simpego: No cyber insurance for companies found.
  Where does it say so?

  Simpego Produktübersicht, abgerufen 06.11.2026

  Open document: Simpego Produktübersicht (opens in a new window), retrieved 06.11.2026

In 63 scenarios from 23 industries, a cost item concerns this module.

All scenarios with this module

• Butcher’s shop
  • Refrigeration system manipulated, goods spoiled covered
  • Server encrypted, scales without prices, deliveries delayed covered
  • Fake invoice from the livestock dealer covered
  • Customer data stolen from the party catering shop covered
• Bakery and confectionery
  • Ransomware paralyses all branch tills covered
  • Price screens show propaganda covered
• Restaurant and catering
  • Till and reservations gone on Saturday evening due to ransomware covered
  • Fake card payment in the takeaway shop covered
  • Guest data leaked at the reservation provider covered
• Hotel and accommodation
  • Booking account taken over, guests cheated out of deposits covered
  • Ransomware locks hotel software and room cards covered
  • Booking data stolen from a software provider covered
  • Payouts from Booking.com to someone else’s account covered
• Trades (electrical, plumbing, joinery, painting)
  • Hacked email account: customer pays invoice into the wrong account covered
  • Logged in via VPN on a Sunday, server encrypted covered
  • Joinery’s CNC machine manipulated covered
• Construction company
  • Project data and cost calculations encrypted covered
  • Plans of a sensitive building on the darknet covered
• Garage and car dealership
  • Customer pays fraudsters for a used car covered
  • Ransomware with published customer data covered
  • Trojan triggers payments in e-banking covered
• Medical practice
  • Patient data encrypted and published covered
  • Attack on the practice’s IT service provider covered
  • Test results sent to the wrong email address covered
• Dental practice
  • Ransomware closes the practice for two weeks covered
  • X-ray PC without updates becomes the point of entry covered
  • Data leaked from online appointment booking covered
  • Trojan in the practice’s e-banking covered
• Physiotherapy
  • Ransomware on the practice server covered
  • Email account hacked, spam to patients covered
  • Report sent to the wrong health insurer covered
• Pharmacy and drugstore
  • Pharmacy software encrypted on Friday afternoon covered
  • Health data from the online shop covered
• Fiduciary services
  • Fake president with a cloned voice covered
  • Client data stolen, publication threatened covered
  • Client pays fee to fraudsters covered
• Law firm and notary’s office
  • Client data on the darknet covered
  • Encrypted files, missed deadline covered
  • Legal brief sent to the wrong party covered
• Architectural and engineering office
  • Plans encrypted, construction site waiting covered
  • Cloud storage configured to be open covered
  • Client pays fee to fraudsters covered
  • Calculation data changed unnoticed covered
• Retail (shop)
  • Manipulated card terminal covered
  • Webshop paralysed during the Christmas period covered
  • Break-in via the air conditioning technician’s access covered
• Online shop
  • Card data stolen in the shop (skimming) covered
  • Extortionists threaten to publish customer data covered
• Hairdresser, beauty salon, nail studio
  • Customer data leaked at the booking provider covered
• Transport and logistics
  • Dispatching encrypted, lorries at a standstill covered
  • Freight payment to fraudsters covered
  • Fleet portal hacked covered
• Production and industrial SMEs
  • ERP encrypted, production at a standstill for a month covered
  • Remote access stops machines for five days covered
  • Machine parameters changed, series defective covered
  • Design data stolen covered
• Property management
  • Tenant data encrypted and copied covered
  • Tenants receive letters with a new IBAN covered
• Association and foundation
  • Membership list with dates of birth published covered
  • Foundation encrypted, data on the darknet covered
• Municipality and public administration
  • Ransomware, residents’ data on the darknet covered
• IT service provider and software company
  • All customers encrypted via remote maintenance covered
  • Fake helpdesk via Teams covered

The other 16 modules

• Restore data and systems
• Replace unusable devices
• Loss of income after an attack
• Outage at the IT provider
• Outage due to operating error
• Cyber extortion
• Third-party claims after a data breach
• Proceedings before authorities
• Inform affected people
• Fraud with fake instructions
• Hacked e-banking
• Phone hacking and extra costs
• Property damage caused by an attack
• Reputational damage
• Card industry penalties
• Media liability