Laptop displaying digital security symbols and cyber protection elements. Cyber insurance helps SMEs manage data loss, cyber attacks, ransomware incidents and IT security breaches.

Cyber attack on your SME: are you insured?

Why cyber attacks are a growing risk for SMEs

The Federal Office for Cybersecurity (FOCS) receives tens of thousands of reports of cyber incidents every year. At the same time, cyber attacks are becoming increasingly sophisticated: criminals are making greater use of artificial intelligence to make fraudulent activities appear highly convincing. The threat does not only affect large corporations but also small and medium-sized enterprises (SMEs), which often do not have their own cyber security teams to limit the impact of an attack.

These businesses are often left vulnerable, while data recovery and protection against future attacks can be both costly and time-consuming. This is where cyber insurance comes in. It covers the costs required for specialised experts to restore data and secure systems.

In addition to protecting your business, it is also worth considering cyber risks in your private life. As digital services become increasingly important, individuals face growing cyber risks as well. You can learn more in our article on Cyber Insurance for Private Individuals.

Cyber insurance for businesses in Switzerland: overview of services

Cyber insurance solutions are modular and adapt to the individual needs of your business. They are a key form of protection against cybersecurity risks and cover a variety of areas relevant to your operations.

  • The insurance covers loss and damage suffered due to data loss, damage to systems, data theft and extortion. In the event of a claim, IT experts will take care of data recovery. Additionally, a specialised team will be on hand to help prevent loss and damage in cases of extortion.

  • In an emergency or crisis situation, you will receive support in assessing the threat and recommendations for damage limitation.

  • In the event of a hacker or DDoS attack* that paralyses your production site, website, online shop or payment system, the insurance will cover the resulting loss of income.

  • If one of your customers is harmed by malware that you unknowingly spread (e.g. via an infected link or attachment in an e/mail), cyber insurance will cover the resulting costs. You can also rely on a team of experts to defend you against any unjustified accusations.

  • Defamatory posts about your business will be taken down quickly with the help of a specialised lawyer. If your business suffers financial loss or damage as a result of a post, a specialised lawyer will assert your claims for compensation.

  • IT assistance for SMEs: It’s not only hacker attacks that can affect your IT systems. A team of qualified experts are available to help you with a range of other IT problems (printer not working, black screen, etc.).

  • With the supplementary CyberCrime-Social Engineering module, you’ll also be protected against loss and damage from identity theft.

* A DDoS (Distributed Denial of Service) attack involves overwhelming an online resource with a large number of simultaneous requests. The goal is to disrupt or disable the availability of a website by exceeding its processing capacity.

What does a cyber attack really cost an SME?

The costs of a cyber attack often exceed expectations – and go far beyond IT infrastructure alone. According to the Swiss Insurance Association (SIA), a successful ransomware attack costs a Swiss SME an average of CHF 84,000 – with an upward trend. Typical cost items include:

  • IT forensics & data recovery: tens of thousands of francs depending on the scope

  • Business interruption: depending on the sector, several days to weeks of lost revenue

  • Reputational damage and customer loss: long-lasting and difficult to quantify

  • Legal and notification costs in the event of data breaches under Swiss data protection law (nFADP)

  • Ransom demands in ransomware cases: often five- to six-figure amounts

Cyber insurance covers exactly these costs and provides immediately available experts who are reachable around the clock.

Let's find out together which cyber modules suit your business.

Cyber insurance for the self-employed

Self-employed individuals can also take out cyber insurance, as can those who engage in self-employment as a secondary occupation (provided their annual turnover does not exceed a certain amount, for example CHF 20,000). The conditions for taking out insurance vary depending on the insurance provider. We will be happy to help you find the product that suits your circumstances. Discover our other insurance solutions for businesses in Switzerland.

Employee training: the most effective defence against cyber attacks

The most common cause of cyber incidents is human error. Carelessly clicking on links in an e-mail or opening attachments can cause severe damage to a company’s IT infrastructure, which is why it’s important to ensure your employees are properly trained in terms of IT security. Some insurance providers offer special cyber training programmes for businesses. If you are interested, we will be happy to put you in touch with them.

You can also increase IT security at your company by keeping abreast of the latest threats and making sure you receive regular security reports. Contact us if you want to find out more about the options available.

Which cyber insurance solution is right for your business?

Before you take out cyber insurance, our experts will sit down with you to conduct a risk analysis of your business and decide which modules are relevant. Take advantage of this offer and protect your company in case of an emergency. Schedule a risk analysis consultation now. If you have any questions, you can reach us by phone on 034 422 70 24 or by e-mail at burgdorf@unionsb.ch.

Frequently asked questions about cyber insurance for businesses

Does a small business need cyber insurance?

Cyber attacks no longer target only large corporations. SMEs often have fewer technical and human resources available to prevent attacks or manage the consequences independently.

What does cyber insurance cover?

Depending on the insurance solution selected, cyber insurance may cover data recovery, digital forensics, business interruption, cyber extortion, third-party liability claims and crisis management services.

Does cyber insurance cover the costs of a ransomware attack?

Many cyber insurance policies provide cover for the consequences of ransomware attacks. This often includes data recovery, external IT specialists, business interruption and other related losses. The exact scope of cover depends on the insurance solution chosen.

What is social engineering?

Social engineering involves criminals manipulating employees through fraudulent emails, telephone calls or messages. The objective is usually to obtain access credentials or persuade individuals to authorise payments. Many insurers offer dedicated CyberCrime modules to cover this type of risk.

How much does cyber insurance cost for an SME?

Premiums depend on various factors, including the industry sector, company size, turnover, IT infrastructure, level of cover selected and existing cyber security measures.

Is a backup sufficient protection against cyber attacks?

No. Backups are an important component of cyber security but do not replace cyber insurance. Effective protection requires a combination of organisational, technical and insurance-based safeguards.

Are data breaches covered?

Depending on the policy, costs associated with data breaches, legal assistance, notification obligations and liability claims may be covered.

How quickly can I obtain support following a cyber incident?

Many cyber insurance providers make specialists available to assist in the event of a claim. These experts support businesses with incident analysis, immediate response measures, data recovery and communication with affected parties.

Are your cyber risks adequately covered?

Every business faces different digital risks. The most appropriate cyber insurance solution depends, among other things, on your industry, IT infrastructure, number of employees and the type of data you manage.

Our experts will analyse your individual risk situation and identify which cyber insurance modules may be suitable for your business.

Editorial note: This article was originally published in June 2026 and was professionally reviewed and updated in September 2026.

Share this article via e-mail or on social media.

You might also be interested in