Malware: Company, Germany
In the application for cyber insurance, the company stated via its broker that all computers had up-to-date protection software and that updates were installed promptly.
- Incident · date unknown · Schleswig-Holstein (LG Kiel), Germany
- Evidence: confirmed by an authority
- Malware
As of
What happened
After an attack in which hackers used the company’s computing capacity, an expert found outdated server software and missing anti-malware software. The LG Kiel (judgment of 23.5.2024, 5 O 128/21) ruled in favour of the insurer, which had rescinded the contract on grounds of fraudulent misrepresentation; the insurer paid nothing.
- Affected
- Company (anonymous)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Outdated server software, no anti-malware software
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: yes, according to the source.
-
Expensive calls, cryptojacking, misused computing power
Mostly no information 5 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Application questions on IT security must be checked and answered truthfully; answers given «off the cuff» can cost the entire insurance cover.
Sources
- Wer bei der Cyber-Versicherung schummelt, geht leer aus (LG Kiel, 5 O 128/21) (opens in a new window) Deutsches Handwerksblatt · 2025-07-01