Business Cyber Insurance (option for KMU SecureConnect, Sunrise Ethernet and others)
Sunrise (AXA)
Policy terms: Ausgabe 05.2026 (Datei «vsept26»)
CHF 479–1'078 per year
-
Immediate help in an emergency covered
Limit CHF 5'000. Initial immediate measures up to CHF 5'000 without deductible and without being counted towards the sum insured; crisis management up to CHF 20'000 within the first-party sum insured.
-
Restore data and systems limited
Limit CHF 20'000. As AXA basic cover, but first-party losses only up to CHF 20'000 in total per claim.
-
Replace unusable devices limited
No entitlement: AXA may replace hardware if this is cheaper than restoration (deviation from the property damage exclusion B6).
-
Loss of income after an attack limited
Limit CHF 20'000. Waiting period 12 hours, indemnity period max. 1 year, within the first-party sum insured of CHF 20'000; revenue basis max. CHF 5 million.
-
Outage at the IT provider limited
Data restoration at cloud providers only on a subsidiary basis; outage of third-party service providers without an attack excluded.
-
Outage due to operating error not covered
No insured event: a cyber first-party loss event requires an intentional attack. No express exclusion, but not insured.
-
Cyber extortion not covered
Ransom excluded; restoration after ransomware covered within the first-party sum insured. No extension offered.
-
Third-party claims after a data breach limited
Limit CHF 200'000. As AXA, but only up to CHF 200'000 per claim.
-
Proceedings before authorities limited
Lawyer’s and procedural costs in criminal, supervisory and administrative proceedings covered; fines excluded (B4).
-
Inform affected people covered
Identifying and notifying affected persons, call centre, internet portal, credit monitoring up to 12 months; agree with AXA in advance.
-
Fraud with fake instructions no information
No additional cover for social engineering found in the Sunrise collective contract.
-
Hacked e-banking not covered
Losses in connection with e-banking excluded; no additional cover.
-
Phone hacking and extra costs no information
No additional cover for phone hacking found in the collective contract.
-
Property damage caused by an attack not covered
Property damage and resulting loss of income excluded. However, controls of machines and installations count as an IT system (E11): data/software of the control system are insured, the spoiled goods are not.
-
Reputational damage no information
Only costs of a PR agency against threatened reputational damage (A3.3); loss of income due to loss of reputation not mentioned.
-
Card industry penalties not covered
Contractual penalties and fines excluded (B4), as is card misuse (B11).
-
Media liability limited
Only in connection with data in the possession of the policyholder (unauthorised publication, copyright, name and trademark rights).
Key facts and terms
- Price
- CHF 479–1'078 per year
- For whom
- Sunrise business customers with up to 50 employees and CHF 5 million revenue; only as part of a package
- Sums insured
- CHF 20'000, CHF 200'000
- Deductible
- CHF 1'000
- Waiting period for loss of income
- 12 hours
- Indemnity period
- 12 months
- Territorial scope
- as the AXA basis (worldwide, without US/Canada liability); only companies domiciled in Switzerland
Price: Fixed price in the factsheet; no calculator needed.
Gross negligence: No waiver of the reduction for gross negligence found in the Sunrise collective contract (unlike AXA SME module A13). Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Volltextsuche «grobfahrlässig»: kein Treffer Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026Where does it say so? (gross negligence)
Exclusions and Duties before and after a loss (2)
Exclusions
- As AXA basic cover: war/cyber operations, infrastructure, extortion payment, e-banking, bodily injury and property damage.
Where does it say so? (exclusion)
Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Teil C, S. 15–16
«Nicht unter diesen Ausschluss fallen … vertraglich genutzte Cloud-Computing Systeme, welche von einem Cyber-Ereignis betroffen sind»
Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026
Duties before and after a loss
- Weekly full backup, backups separate from originals, protection systems up to date; patches as AXA (30 days for critical vulnerabilities).
Where does it say so? (obligation)
Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Das Wichtigste in Kürze, S. 3
«mindestens wöchentlich eine Vollsicherung der Daten erstellen»
Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026
All values as a table
| Module | Status | Limit | What applies | Source |
|---|---|---|---|---|
| Immediate help in an emergency | covered | CHF 5'000 | Initial immediate measures up to CHF 5'000 without deductible and without being counted towards the sum insured; crisis management up to CHF 20'000 within the first-party sum insured. | Where does it say so? (Immediate help in an emergency)Factsheet Business Cyber Insurance, Option für KMU SecureConnect, abgerufen 06.11.2026, S. 1, Leistungen «Für erste Sofortmassnahmen durch Cybersachverständige sind Kosten bis zu CHF 5000 gedeckt» Open document: Factsheet Business Cyber Insurance, Option für KMU SecureConnect (opens in a new window), retrieved 06.11.2026 |
| Restore data and systems | limited | CHF 20'000 | As AXA basic cover, but first-party losses only up to CHF 20'000 in total per claim. | Where does it say so? (Restore data and systems)Factsheet Business Cyber Insurance, Option für KMU SecureConnect, abgerufen 06.11.2026, S. 1, Leistungen «Deckung für Cyber-Eigenschäden (Schäden des versicherten Unternehmens selbst) von bis zu CHF 20 000 je Versicherungsfall» Open document: Factsheet Business Cyber Insurance, Option für KMU SecureConnect (opens in a new window), retrieved 06.11.2026 |
| Replace unusable devices | limited | not stated | No entitlement: AXA may replace hardware if this is cheaper than restoration (deviation from the property damage exclusion B6). | Where does it say so? (Replace unusable devices)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. D2, S. 15 «kann die AXA in Abänderung von B6 entscheiden, das vom Cyber-Ereignis betroffene IT-System oder Teile davon zu ersetzen» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Loss of income after an attack | limited | CHF 20'000 | Waiting period 12 hours, indemnity period max. 1 year, within the first-party sum insured of CHF 20'000; revenue basis max. CHF 5 million. | Where does it say so? (Loss of income after an attack)Factsheet Business Cyber Insurance, Option für KMU SecureConnect, abgerufen 06.11.2026, S. 1, Einschränkungen «Der Versicherungsschutz für Betriebsunterbrechungen beginnt erst nach einer Ausfallzeit von zwölf Stunden.» Open document: Factsheet Business Cyber Insurance, Option für KMU SecureConnect (opens in a new window), retrieved 06.11.2026 |
| Outage at the IT provider | limited | not stated | Data restoration at cloud providers only on a subsidiary basis; outage of third-party service providers without an attack excluded. | Where does it say so? (Outage at the IT provider)Factsheet Business Cyber Insurance, Option für KMU SecureConnect, abgerufen 06.11.2026, S. 2 «Kosten für die Datenwiederherstellung, die durch die Nutzung von Cloud-Anbietern entstehen, sind subsidiär gedeckt.» Open document: Factsheet Business Cyber Insurance, Option für KMU SecureConnect (opens in a new window), retrieved 06.11.2026 |
| Outage due to operating error | not covered | not stated | No insured event: a cyber first-party loss event requires an intentional attack. No express exclusion, but not insured. | Where does it say so? (Outage due to operating error)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. E2, S. 16 «Ein Cyber-Eigenschaden-Ereignis ist ein vorsätzlicher, schädigender Angriff durch Dritte oder durch versicherte Personen» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Cyber extortion | not covered | not stated | Ransom excluded; restoration after ransomware covered within the first-party sum insured. No extension offered. | Where does it say so? (Cyber extortion)Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Teil C, Allgemeine Ausschlüsse, S. 16 «Erpressungsgeldforderungen» Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026 |
| Third-party claims after a data breach | limited | CHF 200'000 | As AXA, but only up to CHF 200'000 per claim. | Where does it say so? (Third-party claims after a data breach)Factsheet Business Cyber Insurance, Option für KMU SecureConnect, abgerufen 06.11.2026, S. 1, Leistungen «Deckung für Cyber-Haftpflicht (Haftpflicht gegenüber Dritten) von bis zu CHF 200 000 je Versicherungsfall» Open document: Factsheet Business Cyber Insurance, Option für KMU SecureConnect (opens in a new window), retrieved 06.11.2026 |
| Proceedings before authorities | limited | not stated | Lawyer’s and procedural costs in criminal, supervisory and administrative proceedings covered; fines excluded (B4). | Where does it say so? (Proceedings before authorities)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A1.3.2, S. 6 «im Zusammenhang mit einem Straf-, Aufsichts- oder Verwaltungsverfahren, das gegen den Versicherungsnehmer oder eine versicherte Person durch eine Behörde eingeleitet wird» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Inform affected people | covered | not stated | Identifying and notifying affected persons, call centre, internet portal, credit monitoring up to 12 months; agree with AXA in advance. | Where does it say so? (Inform affected people)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A1.3.2, S. 6 «die Einrichtung einer telefonischen Hotline (Call-Center) und eines Internetportals, um Anfragen der Betroffenen zu beantworten» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Fraud with fake instructions | no information | not stated | No additional cover for social engineering found in the Sunrise collective contract. | Where does it say so? (Fraud with fake instructions)Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Inhaltsverzeichnis Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026 |
| Hacked e-banking | not covered | not stated | Losses in connection with e-banking excluded; no additional cover. | Where does it say so? (Hacked e-banking)Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Teil C, Allgemeine Ausschlüsse, S. 16 «Schäden im Zusammenhang mit dem EBanking oder dem elektronischen Zahlungsverkehr» Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026 |
| Phone hacking and extra costs | no information | not stated | No additional cover for phone hacking found in the collective contract. | Where does it say so? (Phone hacking and extra costs)Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise), Ausgabe 05.2026 (Datei «vsept26»), Inhaltsverzeichnis Open document: Allgemeine Versicherungsbedingungen (AVB) Cyberversicherung Unternehmen (Business Cyber Insurance, Kollektivvertrag Sunrise) (opens in a new window), retrieved 06.11.2026 |
| Property damage caused by an attack | not covered | not stated | Property damage and resulting loss of income excluded. However, controls of machines and installations count as an IT system (E11): data/software of the control system are insured, the spoiled goods are not. | Where does it say so? (Property damage caused by an attack)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. B6, S. 12 «Kein Versicherungsschutz besteht bei Personen- und Sachschäden; einschliesslich der sich daraus ergebenden Vermögenseinbussen, Ertragsausfälle» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Reputational damage | no information | not stated | Only costs of a PR agency against threatened reputational damage (A3.3); loss of income due to loss of reputation not mentioned. | Where does it say so? (Reputational damage)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A3.3, S. 8 «um einen möglichen Reputationsschaden unmittelbar abzuwenden oder zu mindern» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Card industry penalties | not covered | not stated | Contractual penalties and fines excluded (B4), as is card misuse (B11). | Where does it say so? (Card industry penalties)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. B4, S. 12 «Kein Versicherungsschutz besteht bei Schäden im Zusammenhang mit Vertragsstrafen, Bussen, Geldstrafen» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
| Media liability | limited | not stated | Only in connection with data in the possession of the policyholder (unauthorised publication, copyright, name and trademark rights). | Where does it say so? (Media liability)Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung, Ausgabe 06.2024 (16381DE – 2024-06), Ziff. A2.1, S. 7 «die unberechtigte Veröffentlichung oder die Verletzung von Urheber-, Namen- und Markenrecht im Zusammenhang mit Daten» Open document: Allgemeine Vertragsbedingungen (AVB) KMU Versicherung, Modul Cyberversicherung (opens in a new window), retrieved 06.11.2026 |
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.