Search I’ve been hacked Advice Menu
I’ve been hacked
For me Overview: For me
For businesses Overview: For businesses
Costs and comparison Overview: Costs and comparison
Swiss threat landscape Overview: Swiss threat landscape

Retail (shop): what can happen, and who pays?

limited 7 of 16 cost items usually covered

6 typical cases with a receipt: what they cost and which item cyber insurance usually pays. Since October 2026, attackers in several European countries have been manipulating refrigeration systems via the internet.

Who pays for spoiled goods after an attack

As of

Retail4. Webshop paralysed during the Christmas period46. Break-in via the air conditioning technician’s access62. Till blocked by ransomware25. Manipulated card terminal51. Employee buys gift cards for the boss13. Refrigerated shelves heated up overnight3

Webshop paralysed during the Christmas period

Break-in via the air conditioning technician’s access

Till blocked by ransomware

Manipulated card terminal

Employee buys gift cards for the boss

Refrigerated shelves heated up overnight

Tap a number to jump to the scenario.

On this page
  1. Scenarios
  2. A day closed
  3. Connected
  4. Real cases

6 scenarios, 6 receipts

  1. Employee buys gift cards for the boss
  2. Till blocked by ransomware
  3. Refrigerated shelves heated up overnight
  4. Webshop paralysed during the Christmas period
  5. Manipulated card terminal
  6. Break-in via the air conditioning technician’s access

1Employee buys gift cards for the boss

Receipt

Retail (shop)

Tap a line for the reasoning

  • Gift cards CHF 500–3'000 add-on

    Often below the deductible. How we got there: Assumption.

Usually paid by the cyber policy
nothing
Open or only with an add-on
CHF 500–3'000
Usually stays with the business
nothing

Likelihood high

A shop assistant receives an email from the supposed owner and buys gift cards for CHF 2'000.

How it unfolds

Entry point: Fake sender address

What AI changes: AI writes flawless, personally tailored phishing emails in German close to Swiss dialect; the old warning sign of «bad German» disappears. According to IBM, attackers used AI in 16% of data breaches in 2025, mostly for phishing.

Why high? NCSC: many reports of the gift card scam.

Where does it say so?

Woche 52: Gezielter, komplexer, raffinierter – Knapp 65'000 Meldungen ans BACS im 2025, 30.12.2025

Open document: Woche 52: Gezielter, komplexer, raffinierter – Knapp 65'000 Meldungen ans BACS im 2025 (opens in a new window), retrieved 06.11.2026

What prevents it

  • Rule: never buy gift cards on instructions by email.
  • Call back.
  • Training.
Pitfalls in the terms
  • Social engineering is usually only an add-on module (AXA A6, Mobiliar B8, Zurich module G Premium) or has a low sub-limit (Helvetia ECO CHF 30'000). Without the add-on, the cyber policy does not pay the amount transferred.
    Where does it say so?

    Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen, Ausgabe 01.2024, Ziff. B8.1

    «Der Versicherungsschutz gilt, sofern diese Deckung ausdrücklich in der Police erwähnt ist.»

    Open document: Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen (opens in a new window), retrieved 06.11.2026

Modules: Fraud with fake instructions

2Till blocked by ransomware

Receipt

Retail (shop)

Tap a line for the reasoning

  • IT service provider: clean-up, rebuild, restoring the backup CHF 900–3'400 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 5–15 h × CHF 180–225/h (IT support for SMEs, office hours)

  • Reset tills CHF 180–2'400 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 1–3 devices × CHF 180–800 per device

  • Loss of revenue CHF 3'000–9'200 limited

    Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue. How we got there: 1–3 days × around CHF 6'100 revenue/day × 50% (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

  • Ransom CHF 470–930 limited

    Ransom: Mobiliar and Sunrise never, AXA only with extension, Zurich within sub-limit 25%, Helvetia CHF 30'000–100'000, Chubb in principle yes; reporting to the police is mandatory. How we got there: Documented: 500 euros (stationery shop DE), 1'000 euros (hairdresser DE), converted at an assumed rate of 0.93.

Usually paid by the cyber policy
CHF 1'080–5'800
Open or only with an add-on
CHF 3'470–10'130
Usually stays with the business
nothing

Likelihood medium

Via an outdated router, attackers get into the till system of a stationery shop and encrypt it. The perpetrators demand 500 euros; the shop sells only for cash with handwritten notes for two days.

How it unfolds

Entry point: Outdated router, operating system without updates

What AI changes: AI speeds up finding open vulnerabilities (router, VPN, remote maintenance) and writing extortion emails; the time between publication of a vulnerability and an attack is getting shorter, and the insurers’ patch deadline (14 or 30 days) becomes tight.

Why medium? Documented in Germany (stationery shop, grocery shop closed for several days).

What prevents it

  • Keep the router and till system up to date.
  • Tills capable of working offline.
  • Backups.
Pitfalls in the terms
  • Patch deadline: close critical vulnerabilities within 30 days (AXA C2, Zurich Art. 6, Helvetia 3.6.1.1), at Mobiliar within 14 days; Mobiliar excludes losses caused by software without manufacturer support (E let. n).
    Where does it say so?

    Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen, Ausgabe 01.2024, Teil D Ziff. 5, S. 21

    «Sie müssen den Patch zur Behebung der kritischen Schwachstelle innerhalb von 14 Tagen nach der Veröffentlichung»

    Open document: Cyberversicherung, Kundeninformationen und Allgemeine Bedingungen (opens in a new window), retrieved 06.11.2026

  • Waiting period: loss of income only after 12 hours (AXA; Mobiliar only with add-on B4) or 24 hours (Helvetia); at Zurich only in Optimum/Premium, waiting period according to the policy. An outage shorter than the waiting period is borne by the business.
    Where does it say so?

    Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), 01.07.2026, Ziff. 1.1, Karenzfrist 24 Std.

    Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026

  • Ransom: Mobiliar and Sunrise never pay, AXA only with the «Cybererpressung» extension, Zurich within the sub-limit of 25% of the first-party sum insured, Helvetia CHF 30'000–100'000; reporting to the police is mandatory.
    Where does it say so?

    Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2024, Art. 10.1, S. 7

    «Bei sämtlichen Ransomware-Attacken muss eine Strafanzeige bei der Polizei eingereicht werden.»

    Open document: Zurich Cyberversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB) (opens in a new window), retrieved 06.11.2026

Modules: Restore data and systems, Loss of income after an attack, Cyber extortion

3Refrigerated shelves heated up overnight

Receipt

Retail (shop)

Tap a line for the reasoning

  • Destroyed goods CHF 2'000–40'000 not covered

    Excluded in all cyber GTC reviewed (AXA B6, Mobiliar E let. e, Zurich Art. 5, Helvetia 3.2.3 b, Chubb 4.8); at AXA also the resulting loss of income. How we got there: Lower limit: Belgium around EUR 100'000 for around 60 branches, on average around EUR 1'700 per branch. Upper limit: value of goods CHF 40'000 in the cold room of a butcher’s shop (Zurich property factsheet) as an assumption for a shop with a large range of fresh products.

  • Refrigeration technician: reset the control system CHF 810–3'400 covered

    Restoration of data, software and systems in the basic cover; Sunrise/AXA collective only up to CHF 20'000 first-party loss. How we got there: 3–10 h × CHF 270–338/h (IT support with 50% surcharge outside office hours)

  • Loss of revenue CHF 1'800–3'700 not covered

    Consequence of the property damage. How we got there: 1–2 days × around CHF 6'100 revenue/day × 30% (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

Usually stays with the businessCHF 3'800–43'700

Usually paid by the cyber policy
CHF 810–3'400
Open or only with an add-on
nothing

Likelihood medium

During the night, attackers switch the refrigerated and freezer cabinets of a grocery shop to defrost mode; the temperature rises to 50 degrees. Meat, dairy products and frozen goods have to be disposed of.

How it unfolds

Entry point: Remote monitoring of the refrigeration system on the internet

What AI changes: AI makes mass scanning cheaper.

Why medium? Documented in France (more than 230 branches; CERT-FR: numerous compromises), Belgium (goods worth around EUR 100'000), Sweden and Germany; no case known in Switzerland as of 06.11.2026.

Where does it say so?

CERTFR-2026-ALE-012: Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération, 12.10.2026, aktualisiert 13. und 16.10.2026, Recommandations

«Le CERT-FR a connaissance de nombreuses compromissions des controleurs à distance»

Open document: CERTFR-2026-ALE-012: Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (opens in a new window), retrieved 06.11.2026

Where does it say so?

French supermarket cyberattack triggers wider security alert, 14.10.2026, Abschnitt Intermarché (nach Le Monde)

«a cold room reached 50°C before the damage was discovered»

Open document: French supermarket cyberattack triggers wider security alert (opens in a new window), retrieved 06.11.2026

What prevents it

  • Refrigeration system not directly on the internet.
  • Independent temperature alarm.
  • Clarify the gap in cover with the adviser.
Pitfalls in the terms
  • Property damage excluded: no cyber GTC reviewed pays for spoiled goods, dead animals or damaged machines (AXA B6, Mobiliar E let. e, Zurich Art. 5, Helvetia 3.2.3 b); AXA also excludes the loss of income resulting from the property damage. The control system itself counts as an IT system (AXA E11, Zurich Art. 102.1).
    Where does it say so?

    Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. B6 und E11

    Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026

  • Property insurance usually does not help: refrigerated goods are insured there only as an add-on and only in the event of a technical defect or power interruption (AXA property B8, Allianz C6.3.3); AXA excludes operating errors (B8.5) and, in the catch-all provision, hacker attacks (let. s), Mobiliar All Risks excludes cyber risks (section 3).
    Where does it say so?

    Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Sachversicherung, Ausgabe 06.2024 (16373DE – 2024-06), Nicht genannte Gefahren, lit. s

    «Schäden verursacht durch Schadprogramme, Hacker- und Denial-of-Service-Angriffe sowie andere Cyber-Ereignisse.»

    Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Sachversicherung (opens in a new window), retrieved 06.11.2026

Modules: Property damage caused by an attack, Restore data and systems, Loss of income after an attack

4Webshop paralysed during the Christmas period

Receipt

Retail (shop)

Tap a line for the reasoning

  • Loss of profit of the webshop CHF 2'400–4'900 limited

    Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue. How we got there: 2–4 days × around CHF 6'100 revenue/day × 20% (assumption: online share) (SFTA VAT statistics 2024, average of businesses liable for VAT; small businesses are lower)

  • Additional costs of defence (geo-filters, blackholing) CHF 900–4'500 limited

    Only after the waiting period (AXA 12 h, Mobiliar 12 h only with add-on, Helvetia 24 h, Zurich only Optimum/Premium). What is reimbursed is revenue minus saved costs (AXA) or EBITDA (Helvetia), not revenue. How we got there: 5–20 h × CHF 180–225/h (IT support for SMEs, office hours)

  • IT forensics and incident response (analysis, containment, preservation of evidence) CHF 500–3'200 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 2–8 h × CHF 250–400/h (market range for incident response)

Usually paid by the cyber policy
CHF 500–3'200
Open or only with an add-on
CHF 3'300–9'400
Usually stays with the business
nothing

Likelihood medium

A DoS attack paralyses a shoe shop’s webshop during its busiest period. After a few days the attack is repelled; sales are lost.

How it unfolds

Entry point: Overload attack

What AI changes: AI hardly plays a role.

Why medium? Sample cases at Helvetia, AXA (3 days) and Mobiliar (12 hours); DDoS against Swiss websites documented.

Where does it say so?

Broschüre Cyber-Versicherung, 07.26 (Nr. 120015329)

Open document: Broschüre Cyber-Versicherung (opens in a new window), retrieved 06.11.2026

Where does it say so?

Factsheet Cyberversicherung Unternehmen, 14152DE – 2025-10

Open document: Factsheet Cyberversicherung Unternehmen (opens in a new window), retrieved 06.11.2026

What prevents it

  • DDoS protection at the hosting provider.
  • Run the shop with a provider that offers protection.
  • Emergency contact.
Pitfalls in the terms

Modules: Loss of income after an attack, Immediate help in an emergency

5Manipulated card terminal

Receipt

Retail (shop)

Tap a line for the reasoning

  • IT forensics and incident response (analysis, containment, preservation of evidence) CHF 1'200–8'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 5–20 h × CHF 250–400/h (market range for incident response)

  • Claims by the card industry no reliable figure limited

    Zurich and Helvetia pay PCI penalties, where insurable; Mobiliar only as an add-on with valid PCI certification; AXA excludes them (B4, B11). How we got there: No amounts found.

Usually paid by the cyber policy
CHF 1'200–8'000
Open or only with an add-on
1 item without an amount
Usually stays with the business
nothing

Likelihood low

A card terminal is swapped or manipulated and reads cards. The card companies notice an accumulation of misuse and demand an investigation.

How it unfolds

Entry point: Physical manipulation, skimming

What AI changes: Hardly any AI connection.

Why low? Skimming at terminals is declining (chip, contactless); Swiss cases in retail are not public.

What prevents it

  • Check terminals daily for changes.
  • Mount terminals firmly.
  • Certified providers only.
Pitfalls in the terms

Modules: Immediate help in an emergency, Card industry penalties

6Break-in via the air conditioning technician’s access

Receipt

Retail (shop)

Tap a line for the reasoning

  • IT forensics and incident response (analysis, containment, preservation of evidence) CHF 2'500–16'000 covered

    In the basic cover at AXA, Mobiliar, Zurich, Helvetia and Chubb; AXA immediate measures up to CHF 5'000 without deductible. How we got there: 10–40 h × CHF 250–400/h (market range for incident response)

  • Claims by customers after card data leak no reliable figure covered

    Third-party claims and defence against unfounded claims in the basic cover; Sunrise/AXA collective up to CHF 200'000. How we got there: No amounts found.

  • PCI claims no reliable figure limited

    Zurich and Helvetia pay PCI penalties, where insurable; Mobiliar only as an add-on with valid PCI certification; AXA excludes them (B4, B11). How we got there: No amounts found.

Usually paid by the cyber policy
CHF 2'500–16'000, plus 1 item without an amount
Open or only with an add-on
1 item without an amount
Usually stays with the business
nothing

Likelihood low

Perpetrators steal the login data of a refrigeration and air conditioning service provider and use them to get into the shop’s network, all the way to the tills.

How it unfolds

Entry point: Login data of a service provider

What AI changes: No direct AI connection.

Why low? Well-known case Target (USA, 2013) via a refrigeration technician.

What prevents it

  • Service providers only in their own, separate network.
  • Separate accounts with two-factor authentication for each service provider.
  • Block access after each job.
Pitfalls in the terms

Modules: Immediate help in an emergency, Third-party claims after a data breach, Card industry penalties

Ranges for a small to medium-sized business, not an insurance benefit. Deductible, sums insured and sublimits come on top. The bars on all receipts use the same scale.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

What a day of downtime costs

CHF 6'100 Average revenue per day; your business may be smaller.

CHF 700–1'600 Annual premium for a micro business, indicative value based on the Helvetia rate, group C, not a quote.

Where the figures come from

Average of businesses liable for VAT (SFTA 2024); small businesses are lower. Only the loss of income after the waiting period is insured (revenue minus saved costs or EBITDA). Reliability: medium.

Waiting period: loss of income only after 12 hours (AXA; Mobiliar only with add-on B4) or 24 hours (Helvetia); at Zurich only in Optimum/Premium, waiting period according to the policy. An outage shorter than the waiting period is borne by the business.

Only a few insurers publish rates. We assign your industry to the Helvetia rate Group C (among others, retail, food production, metal goods, doctors, lawyers); this assignment is ours, not the insurer’s.

Indicative premiums for Retail (shop) per year (indicative value, not a quote)
Business Sum insured Annual premium How we got there
Micro business < CHF 1 million revenue, butcher’s shop/retail/food production (Helvetia Group C, assignment of butcher’s shop derived) First-party loss 50'000–200'000, liability 500'000–1 million around CHF 700–1'600Indicative value, not a quote
How we got there for Micro business < CHF 1 million revenue, butcher’s shop/retail/food production (Helvetia Group C, assignment of butcher’s shop derived)

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote. Butcher’s shop is not named literally in the application; Group C via «retail» and «manufacture of food».

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.1

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026
SME CHF 1–5 million revenue, Group C (retail, food, metal goods/CNC) First-party loss 100'000–500'000, liability 500'000–1 million around CHF 1'100–2'800Indicative value, not a quote
How we got there for SME CHF 1–5 million revenue, Group C (retail, food, metal goods/CNC)

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote.

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.2

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026
SME CHF 5–10 million revenue, Groups A to C First-party loss 200'000–500'000, liability 500'000–1 million around CHF 800–3'100Indicative value, not a quote
How we got there for SME CHF 5–10 million revenue, Groups A to C

Derivation: lower bound = lowest public annual premium (Helvetia KMU-Spezial ECO, tariff 01.07.2026), upper bound = TOP variant of the same group. Cross-check: Zurich Basic from 410 / Optimum from 690 (brochure 2023, parameters unknown), Sunrise/AXA 479 at 20k/200k. Only two insurers with public prices; tariff price before risk assessment and without discounts. Guide value, derived; not a quote.

Where does it say so?

Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle), Ausgabe 01.07.2026, Ziff. 1.3

Open document: Antrag Cyber-Versicherung – KMU-Spezial (mit Prämientabelle) (opens in a new window), retrieved 06.11.2026

What is connected in the business

Real cases

  • Switzerland · 04.2025

    Swiss municipalities (anonymous)

    In April 2025, municipalities increasingly reported emails to the NCSC from supposed mayors or municipal presidents.

  • GermanyAbroad: Germany

    Stationery shop (anonymous)

    Via an outdated router and an operating system that had not been updated, attackers got into the till system of a stationery shop.

  • GermanyAbroad: Germany

    Grocery shop (anonymous)

    An employee opened an email with a supposed job application, whereupon malware was installed.

9 more cases and sample cases

  • France · 10.2026Abroad: France

    Intermarché, Coopérative U, Carrefour (more than 230 branches)

    During the night before 12 October 2026, attackers switched the refrigeration and freezer systems of around 150 Intermarché branches, 80 Carrefour sites and Coopérative U shops to defrost mode; for around six hours the temperature rose to as much as 50 degrees.

  • Belgium · 10.2026Abroad: Belgium

    Delhaize, Carrefour, Spar (around 60 branches)

    After France, the wave hit Belgium: around 40 Delhaize, 15 Carrefour and 5 Spar branches, plus Delhaize shops in Luxembourg.

  • Germany · 11.2026Abroad: Germany

    Edeka supermarket Reisbach

    During the night before a Monday at the beginning of November 2026, the temperatures of the refrigeration systems of an Edeka supermarket in Reisbach rose to 50 degrees, and a large quantity of food had to be thrown away.

  • Sweden · 10.2026Abroad: Sweden

    ICA and Coop (at least 6 Coop branches)

    In Sweden, temperatures in refrigerators and freezers of several ICA and Coop shops rose overnight; Coop reported six affected branches.

  • USA · 11.2013Abroad: USA

    Target (entry via Fazio Mechanical Services)

    On 15 November 2013, the attackers entered the network of the department store chain using login data they had stolen from the service provider Fazio Mechanical Services.

  • Sample case from an insurer: Helvetia

    DoS attack on the online shop of a specialist shoe shop during the Christmas period; repelled after a few days with the help of an IT specialist, with loss of profit until then.

    Insurer’s sample case without amounts; Helvetia: benefits «depending on the selected benefit package». Helvetia BI waiting period 24 hours (KMU-Spezial application).

    Where does it say so?

    Cyber-Versicherung (Broschüre), 07.26 (Nr. 120015329), S. 7/9, «Online-Shop lahmgelegt»

    «Bis zur Installation der Abwehrmassnahmen entsteht während der ertragsreichen Weihnachtszeit dennoch ein Gewinnausfall für das Schuhfachgeschäft.»

    Open document: Cyber-Versicherung (Broschüre) (opens in a new window), retrieved 06.11.2026

  • Sample case from an insurer: AXA

    Outdoor clothing specialist with its own webshop: a DoS attack blocks the system, and the webshop is down for three days.

    Sample case; amount only as an order of magnitude («several thousand francs»), hence chf null. AXA waiting period 12 hours.

    Where does it say so?

    Factsheet Cyberversicherung Unternehmen, 14152DE – 2025-10, Ziff. 5, Ertragsausfall

    «Die AXA übernimmt den Ertragsausfall von mehreren tausend Franken.»

    Open document: Factsheet Cyberversicherung Unternehmen (opens in a new window), retrieved 06.11.2026

  • Sample case from an insurer: Mobiliar

    A flood of requests paralyses an online shop’s website for 12 hours; loss of income.

    Sample case without an amount. Lies exactly at the 12-hour waiting period: shorter outages are borne by the business itself.

    Where does it say so?

    Cyberversicherung für Unternehmen (Produktseite, Schadenbeispiele), abgerufen 06.11.2026, Schadenbeispiele, Ertragsausfall «Server lahmgelegt»

    Open document: Cyberversicherung für Unternehmen (Produktseite, Schadenbeispiele) (opens in a new window), retrieved 06.11.2026

  • Sample case from an insurer: AXA

    Furniture retailer with a webshop: after a hacker attack, a hotel’s order is lost; the hotel waives subsequent delivery and claims damages.

    Sample case without an amount.

    Where does it say so?

    Factsheet Cyberversicherung Unternehmen, 14152DE – 2025-10, Ziff. 5, Schadenersatzforderung

    «Sie stuft einen Teil als ungerechtfertigt ein und wehrt ihn ab, übernimmt aber den gerechtfertigten Anteil.»

    Open document: Factsheet Cyberversicherung Unternehmen (opens in a new window), retrieved 06.11.2026

Three ways forward