Search I’ve been hacked Advice Menu
I’ve been hacked
For me Overview: For me
For businesses Overview: For businesses
Costs and comparison Overview: Costs and comparison
Swiss threat landscape Overview: Swiss threat landscape

Medical practice: what can happen, and who pays?

limited 13 of 19 cost items usually covered

5 typical cases with a receipt: what they cost and which item cyber insurance usually pays. According to our research, pay particular attention to “Test results sent to the wrong email address” (likelihood high).

As of

Medical practice4. Cloud practice software gone for three days3042. Test results sent to the wrong email address25. Ultrasound PC with old Windows infected51. Patient data encrypted and published13. Attack on the practice’s IT service provider3

Cloud practice software gone for three days

Test results sent to the wrong email address

Ultrasound PC with old Windows infected

Patient data encrypted and published

Attack on the practice’s IT service provider

Tap a number to jump to the scenario.

On this page
  1. Scenarios
  2. A day closed
  3. Connected
  4. Real cases

5 scenarios, 5 receipts

  1. Patient data encrypted and published
  2. Test results sent to the wrong email address
  3. Attack on the practice’s IT service provider
  4. Cloud practice software gone for three days
  5. Ultrasound PC with old Windows infected

1Patient data encrypted and published

Receipt

Medical practice

Tap a line for the reasoning

  • IT forensics and incident response (analysis, containment, preservation of evidence) CHF 5'000–32'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 20–80 h × CHF 250–400/h (market range for incident response)

  • IT service provider: clean-up, rebuild, restoring the backup CHF 5'400–20'300 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 20–60 h × CHF 270–338/h (IT support with 50% surcharge outside office hours)

  • Resetting the workstations (PCs, tablets) CHF 900–12'000 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 5–15 devices × CHF 180–800 per device

  • Lawyer: report to the FDPIC, professional secrecy, notification of patients CHF 2'500–14'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 10–40 h × CHF 250–350/h (lawyer’s rate in Switzerland)

  • Notification of patients by letter (postage only) CHF 2'000–24'000 covered

    Notification of affected persons in the basic cover; usually the insurer’s prior consent is required. How we got there: 2'000–20'000 letters × CHF 1.00–1.20 (B-/A-Post 2026); printing, envelope and address preparation not found, would come on top

  • Loss of revenue (paper-based operation, cancelled appointments) CHF 7'200–14'400 limited

    Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue. How we got there: 5–10 days × around CHF 2'870 revenue/day × 50% (assumption) (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

  • Patients’ claims for compensation for non-material damage and damages no reliable figure covered

    Third-party claims and defence against unfounded claims in the basic cover; Sunrise/AXA collective up to CHF 200'000. How we got there: No Swiss amounts found; Helvetia expressly mentions compensation for non-material damage.

  • Data protection proceedings no reliable figure limited

    Lawyer’s and procedural costs covered, fines excluded (AXA B4, Mobiliar E let. k, Helvetia); only Zurich pays penalties, where insurable. How we got there: Procedural costs via lawyer’s hours; fine of up to CHF 250'000 against the responsible person in cases of intent.

  • Ransom (not recommended) no reliable figure limited

    Ransom: Mobiliar and Sunrise never, AXA only with extension, Zurich within sub-limit 25%, Helvetia CHF 30'000–100'000, Chubb in principle yes; reporting to the police is mandatory. How we got there: Comparison with Germany: 10 Bitcoin (around EUR 220'000) paid, data published nevertheless.

Usually paid by the cyber policy
CHF 15'800–102'300, plus 1 item without an amount
Open or only with an add-on
CHF 7'200–14'400, plus 2 items without an amount
Usually stays with the business
nothing

Likelihood medium

An attachment with the subject line «Proposed appointment» brings a Trojan into the practice. Over several days, the perpetrators copy the patient database and then encrypt the server and practice PCs.

How it unfolds

They demand a ransom and post a sample of medical records on the darknet; they then write to individual patients directly. The practice works on paper for a week and has to inform all patients and report to the FDPIC.

Entry point: Email attachment, followed by data exfiltration and encryption

What AI changes: AI writes flawless, personally tailored phishing emails in German close to Swiss dialect; the old warning sign of «bad German» disappears. According to IBM, attackers used AI in 16% of data breaches in 2025, mostly for phishing. AI also makes it easier to search stolen medical records for content that can be used for extortion.

Why medium? Documented in Switzerland (two Neuchâtel practices with data of more than 40'000 patients on the darknet; Vidymed over a month of restoration) and abroad (dental practice in Germany with a loss of around EUR 500'000, practice in the USA closed).

What prevents it

  • Two-factor login for the practice software and the IT service provider’s remote access.
  • Daily backup, one copy offline; practise restoring once a year.
  • Emergency plan with paper forms and a list of patients currently undergoing treatment.
Pitfalls in the terms
  • Backup obligation: AXA and Mobiliar require a backup disconnected from the network at least weekly, Zurich every 7 days, Helvetia daily with a functional check. If it is missing, the insurer reduces the benefit; at AXA, without a usable backup, only the costs of establishing the loss are paid.
    Where does it say so?

    Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. C3 und C5, S. 14

    «keine verwendbare Datensicherung vorhanden ist, so sind nur die Kosten zur Feststellung dieses Sachverhalts gedeckt»

    Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026

  • Reporting obligation: a data security breach likely to result in a high risk must be reported to the FDPIC as soon as possible (Art. 24 FADP). Agree notification and PR with the insurer in advance (AXA, Helvetia), otherwise there will be disputes about the costs.
    Where does it say so?

    Bundesgesetz über den Datenschutz (DSG), SR 235.1, geltende Fassung, Art. 24 DSG (Paraphrase)

    Open document: Bundesgesetz über den Datenschutz (DSG), SR 235.1 (opens in a new window), retrieved 06.11.2026

  • Fines are not insured (AXA B4, Mobiliar E let. k, Helvetia 3.3.1.9 let. e); only Zurich pays penalties, where insurable. FADP fines of up to CHF 250'000 are imposed on the responsible natural person, in cases of intent (Art. 60 FADP).
    Where does it say so?

    Onlinekommentar zu Art. 60 DSG (Verletzung von Informations-, Auskunfts- und Mitwirkungspflichten), abgerufen 06.11.2026, Art. 60 DSG

    Open document: Onlinekommentar zu Art. 60 DSG (Verletzung von Informations-, Auskunfts- und Mitwirkungspflichten) (opens in a new window), retrieved 06.11.2026

  • Ransom: Mobiliar and Sunrise never pay, AXA only with the «Cybererpressung» extension, Zurich within the sub-limit of 25% of the first-party sum insured, Helvetia CHF 30'000–100'000; reporting to the police is mandatory.
    Where does it say so?

    Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2024, Art. 10.1, S. 7

    «Bei sämtlichen Ransomware-Attacken muss eine Strafanzeige bei der Polizei eingereicht werden.»

    Open document: Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB) (opens in a new window), retrieved 06.11.2026

  • Gross negligence (Art. 14 ICA): AXA (A13) and Helvetia (4.6.4) waive the reduction, Mobiliar and Zurich do not. The waiver does not help if an obligation (backup, patch, call-back) has been breached.
    Where does it say so?

    Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A13, S. 11

    «Die AXA verzichtet auf das Recht der Leistungskürzung»

    Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026

  • Patch deadline: close critical vulnerabilities within 30 days (AXA C2, Zurich Art. 6, Helvetia 3.6.1.1), at Mobiliar within 14 days; Mobiliar excludes losses caused by software without manufacturer support (E let. n).
    Where does it say so?

    Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen, Ausgabe 01.2024, Teil D Ziff. 5, S. 21

    «Sie müssen den Patch zur Behebung der kritischen Schwachstelle innerhalb von 14 Tagen nach der Veröffentlichung»

    Open document: Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen (opens in a new window), retrieved 06.11.2026

Modules: Immediate help in an emergency, Restore data and systems, Inform affected people, Loss of income after an attack, Third-party claims after a data breach, Proceedings before authorities, Cyber extortion

2Test results sent to the wrong email address

Receipt

Medical practice

Tap a line for the reasoning

  • Lawyer: reporting obligations under the FADP, notification of affected persons, defence against claims CHF 750–3'500 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 3–10 h × CHF 250–350/h (lawyer’s rate in Switzerland)

  • Notification of the affected patients by letter (postage only) CHF 30–120 covered

    Notification of affected persons in the basic cover; usually the insurer’s prior consent is required. How we got there: 30–100 letters × CHF 1.00–1.20 (B-/A-Post 2026); printing, envelope and address preparation not found, would come on top

  • Liability and defence no reliable figure limited

    Zurich covers unintentional disclosure; for liability events, AXA requires an attack or a data protection breach (E3, E7); check in each individual case. How we got there: No amounts found.

Usually paid by the cyber policy
CHF 780–3'620
Open or only with an add-on
1 item without an amount
Usually stays with the business
nothing

Likelihood high

A medical practice assistant sends laboratory results of 30 patients to a wrong external address because the email program automatically completed the address. The recipient gets in touch, and a patient complains to the FDPIC.

How it unfolds

Entry point: Operating error, not an attack

What AI changes: AI assistants in the email program can suggest wrong recipients; effect not documented.

Why high? Misdirected emails are common; Zurich expressly also covers unintentional disclosure.

Where does it say so?

Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2024

Open document: Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB) (opens in a new window), retrieved 06.11.2026

What prevents it

  • Send test results only via secure channels (HIN, encrypted email).
  • Switch off automatic address completion.
  • Four-eyes principle for bulk mailings.
Pitfalls in the terms
  • Operating errors without an attack: AXA insures only intentional attacks; Mobiliar (BI only with add-on), Zurich (Optimum/Premium) and Helvetia (exhaustive list) cover negligent errors by staff.
    Where does it say so?

    Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. E2, S. 16

    «Ein Cyber-Eigenschaden-Ereignis ist ein vorsätzlicher, schädigender Angriff durch Dritte oder durch versicherte Personen»

    Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026

  • Reporting obligation: a data security breach likely to result in a high risk must be reported to the FDPIC as soon as possible (Art. 24 FADP). Agree notification and PR with the insurer in advance (AXA, Helvetia), otherwise there will be disputes about the costs.
    Where does it say so?

    Bundesgesetz über den Datenschutz (DSG), SR 235.1, geltende Fassung, Art. 24 DSG (Paraphrase)

    Open document: Bundesgesetz über den Datenschutz (DSG), SR 235.1 (opens in a new window), retrieved 06.11.2026

Modules: Immediate help in an emergency, Inform affected people, Third-party claims after a data breach

3Attack on the practice’s IT service provider

Receipt

Medical practice

Tap a line for the reasoning

  • Insurer’s forensics: which patient data is affected? CHF 2'500–16'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 10–40 h × CHF 250–400/h (market range for incident response)

  • Lawyer: reporting obligations under the FADP, notification of affected persons, defence against claims CHF 1'200–7'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 5–20 h × CHF 250–350/h (lawyer’s rate in Switzerland)

  • Notification of patients by letter (postage only) CHF 1'000–6'000 covered

    Notification of affected persons in the basic cover; usually the insurer’s prior consent is required. How we got there: 1'000–5'000 letters × CHF 1.00–1.20 (B-/A-Post 2026); printing, envelope and address preparation not found, would come on top

  • Liability claims no reliable figure covered

    Third-party claims and defence against unfounded claims in the basic cover; Sunrise/AXA collective up to CHF 200'000. How we got there: No amounts found.

Usually paid by the cyber policy
CHF 4'700–29'000, plus 1 item without an amount
Open or only with an add-on
nothing
Usually stays with the business
nothing

Likelihood medium

Through a targeted attack on the IT service provider, unauthorised persons gain access to the patient management system of several practices. The practice does not know which data is affected; the insurer brings in forensic specialists and legal advice.

How it unfolds

Entry point: Supply chain: IT service provider with remote access

What AI changes: AI helps attackers to quickly exploit access to many customers of a service provider.

Why medium? Zurich sample case; in Switzerland, several attacks on service providers in the healthcare sector (Cistec 2025).

Where does it say so?

Broschüre Zurich Cyberversicherung, PDF vom 21.03.2023

Open document: Broschüre Zurich Cyberversicherung (opens in a new window), retrieved 06.11.2026

What prevents it

  • Contract with the IT service provider: security standard, two-factor login, reporting obligation.
  • Remote access only for limited periods.
  • Store patient data in encrypted form.
Pitfalls in the terms

Modules: Immediate help in an emergency, Inform affected people, Third-party claims after a data breach

4Cloud practice software gone for three days

Receipt

Medical practice

Tap a line for the reasoning

  • Loss of revenue (cancelled appointments) CHF 2'300–3'400 limited

    Only if the service provider’s system was attacked, and usually with a written contract (Mobiliar, Zurich); purely technical outages and network outages are not covered. How we got there: 2–3 days × around CHF 2'870 revenue/day × 40% (assumption) (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

Usually paid by the cyber policy
nothing
Open or only with an add-on
CHF 2'300–3'400
Usually stays with the business
nothing

Likelihood medium

The provider of the cloud practice software is attacked and takes the platform offline. For three days, there is no access to medical records, medication and appointments.

How it unfolds

Entry point: Attack on the software provider

What AI changes: No direct AI connection.

Why medium? Attacks on Swiss software providers in the healthcare sector documented (Cistec).

What prevents it

  • Print the daily list of appointments and medication plans locally.
  • Contract on availability and emergency access.
  • Emergency contact at the provider.
Pitfalls in the terms

Modules: Outage at the IT provider

5Ultrasound PC with old Windows infected

Receipt

Medical practice

Tap a line for the reasoning

  • Device manufacturer and IT: reset the PC CHF 900–3'400 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 5–15 h × CHF 180–225/h (IT support for SMEs, office hours)

  • Loss of examinations CHF 860–2'900 limited

    Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue. How we got there: 3–10 days × around CHF 2'870 revenue/day × 10% (assumption) (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

Usually paid by the cyber policy
CHF 900–3'400
Open or only with an add-on
CHF 860–2'900
Usually stays with the business
nothing

Likelihood medium

The PC on the ultrasound device still runs an operating system without manufacturer updates. A worm from the practice network paralyses it; the device cannot be used for two weeks, and examinations are postponed.

How it unfolds

Entry point: Outdated operating system on the medical device

What AI changes: No direct AI connection.

Why medium? In 2019, a hospital had to temporarily isolate medical devices (Emotet); old systems on devices are widespread (assumption).

What prevents it

  • Put medical devices with old systems in their own network without internet.
  • Ask the manufacturer for updates or a replacement plan.
  • Keep an inventory of all devices with their operating systems.
Pitfalls in the terms

Modules: Restore data and systems, Loss of income after an attack

Ranges for a small to medium-sized business, not an insurance benefit. Deductible, sums insured and sublimits come on top. The bars on all receipts use the same scale.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

What a day of downtime costs

CHF 2'870 Average revenue per day; your business may be smaller.

CHF 700–1'600 Annual premium for a micro business, indicative value based on the Helvetia rate, group C, not a quote.

Where the figures come from

Average of businesses liable for VAT (SFTA 2024); small businesses are lower. Only the loss of income after the waiting period is insured (revenue minus saved costs or EBITDA). Reliability: medium.

Waiting period: loss of income only after 12 hours (AXA; Mobiliar only with add-on B4) or 24 hours (Helvetia); at Zurich only in Optimum/Premium, waiting period according to the policy. An outage shorter than the waiting period is borne by the business.

Only a few insurers publish rates. We assign your industry to the Helvetia rate Group C (among others, retail, food production, metal goods, doctors, lawyers); this assignment is ours, not the insurer’s.

Indicative premiums for Medical practice per year (indicative value, not a quote)
Business Sum insured Annual premium How we got there
Micro business < CHF 1 million revenue, butcher’s shop/retail/food production (Helvetia Group C, assignment of butcher’s shop derived) First-party loss 50'000–200'000, liability 500'000–1 million around CHF 700–1'600Indicative value, not a quote
How we got there for Micro business < CHF 1 million revenue, butcher’s shop/retail/food production (Helvetia Group C, assignment of butcher’s shop derived)

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote. Butcher’s shop is not named literally in the application; Group C via «retail» and «manufacture of food».

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.1

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026
SME CHF 1–5 million revenue, Group C (retail, food, metal goods/CNC) First-party loss 100'000–500'000, liability 500'000–1 million around CHF 1'100–2'800Indicative value, not a quote
How we got there for SME CHF 1–5 million revenue, Group C (retail, food, metal goods/CNC)

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote.

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.2

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026
SME CHF 5–10 million revenue, Groups A to C First-party loss 200'000–500'000, liability 500'000–1 million around CHF 800–3'100Indicative value, not a quote
How we got there for SME CHF 5–10 million revenue, Groups A to C

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote.

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.3

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026

What is connected in the business

Real cases

  • Switzerland · 04.2022

    Two medical practices in Neuchâtel (anonymous)

    Hackers stole data from two medical practices in Neuchâtel and posted it on the darknet; at the beginning of April 2022, «Le Temps» was able to search through data of more than 40'000 patients.

  • Switzerland · 12.2024

    Vidymed

    On 7 December 2024, the Lausanne practice group reported a break-in into its IT and took the systems offline.

  • Switzerland · 2025

    Cistec

    In the first half of 2025, a ransomware attack hit Cistec, a Swiss manufacturer of clinical information systems.

7 more cases and sample cases

  • Switzerland · 10.2019

    GZO Spital Wetzikon

    In mid-October 2019, the Emotet Trojan infected the hospital’s network, very probably via an email with a Word attachment.

  • GermanyAbroad: Germany

    Dental group practice (anonymous)

    Dental practice in Germany: total loss around EUR 500'000, cyber insurance paid most of it.

  • USA · 08.2019Abroad: USA

    Wood Ranch Medical

    On 10 August 2019, ransomware encrypted the practice’s servers, including the patient records.

  • Finland · 10.2020Abroad: Finland

    Psykoterapiakeskus Vastaamo

    A hacker stole the psychotherapy centre’s database with details of around 33'000 patients, including therapy notes.

  • Sample case from an insurer: Helvetia

    A doctor stores patient data on his own server; via a manipulated email, a hacker plants a Trojan and copies all patient data unnoticed over several weeks.

    Insurer’s sample case without amounts; Helvetia: benefits «depending on the selected benefit package».

    Where does it say so?

    Cyber-Versicherung (Broschüre), 07.26 (Nr. 120015329), S. 6/9, «Vertrauliche Patientendaten entwendet»

    «Da der Vorfall erst nach einigen Wochen bemerkt wird, kann er in aller Ruhe die gesamten vertraulichen Patientendaten kopieren.»

    Open document: Cyber-Versicherung (Broschüre) (opens in a new window), retrieved 06.11.2026

  • Sample case from an insurer: Zurich

    Group practice of paediatricians (CHF 1.5 million revenue, 6 employees), IT including the patient management system at the IT service provider. A hacker attack on the service provider gives unauthorised persons access to patient data.

    Sample case without amounts. Shows that an attack on the IT service provider counts as a first-party loss (written contract with the service provider required).

    Where does it say so?

    Broschüre Zurich Cyberversicherung, PDF vom 21.03.2023, Schadenbeispiel Arztpraxis (1/2 und 2/2)

    «Über einen gezielten Hackerangriff gegen den IT-Dienstleister der Arztpraxis Arzt-Muster GmbH erlangen unbefugte Personen Zugriff auf die Patientendaten.»

    Open document: Broschüre Zurich Cyberversicherung (opens in a new window), retrieved 06.11.2026

  • Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB)

    Where does it say so?

    Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2024, Baustein Haftpflicht (Art. 304)

    Open document: Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB) (opens in a new window), retrieved 06.11.2026

Three ways forward