Hiscox CyberClear: business cyber insurance at a glance
This page describes the Hiscox CyberClear product: which modules are included or optional, where the limits are and which conditions apply. For context: cyber insurance can cushion the consequences of an incident; technical precautions remain essential. The offer relates to the German market.
Hiscox CyberClear
Standalone cyber insurance for businesses
Insurer: Hiscox SA, German branch
Insured events
CyberClear covers four groups of insured events. Besides prevention and assistance services, the core cover includes first-party losses and cyber liability. Further modules apply only if agreed in the policy schedule with a limit.
On Cyberschutz.io for freelancers, small service firms, online shops and small and medium-sized businesses.
- I.1
Network security breach
E.g. hacking, malware or unauthorised access to IT systems.
- I.2
Operating and programming errors
Errors in operation or programming that damage data or systems.
- I.3
Data breach
Breach of data protection or confidentiality duties, e.g. when customer data leaks.
- I.4
Cyber extortion
Threat of a network or data breach combined with a ransom demand.
Benefits in three phases
Before an incident
Prevention services
Available regardless of a claim, as described in the schedule supplement or customer portal.
Clause II.1.2
Cyber crisis plan
A template to act in a structured way in an emergency.
Clause II.1.2
Cyber training for staff
Training for your team, plus the Hiscox Business Academy.
Clause II.1.2
On suspicion or in a crisis
Emergency assistance
Crisis provider when a risk is concrete: expert assessment, recommended immediate steps, first evaluation. No excess and not counted against the sum insured.
Clause II.1.1
Crisis management
Costs of the crisis provider, other external providers and internal extra costs.
Clause II.2.1
IT forensics
Investigating the cause and extent of the incident.
Clause II.2.2
Legal advice
E.g. on reporting and notification duties.
Clause II.2.3
Ransom in cyber extortion
Reimbursement of ransom paid and support in handling it.
Clause II.2.9
Psychological counselling
For staff after a cyber event, up to five sessions.
Clause II.2.19
After an incident
Restoration
Restoring data and systems; IT hardware is subject to its own limit in the schedule.
Clause II.2.5
Public relations
Costs to limit reputational damage.
Clause II.2.4
Notification and regulatory reporting
Notifying affected people, regulatory reporting and a call centre for enquiries.
Clause II.2.6
Cyber liability
Paying justified and defending unjustified third-party claims.
Clause II.3.1
Regulatory and legal support
Defence costs in regulatory proceedings and criminal legal cover.
Clause II.3.2, II.2.12
Security analysis
Analysis of the exploited weakness and recommendations for improvement.
Clause II.2.16
Other documented benefits
Including credit monitoring for affected people, mitigation costs, contractual penalties to e-payment providers and media liability.
Clause II.2.15, II.2.17, II.3.5, II.3.6
Optional – only if agreed in the policy schedule
Cyber theft
Loss of funds or goods through a network security breach.
Clause II.2.7
Cyber fraud / CEO fraud
Fake president and supplier fraud following a network breach; police report and recovery attempts are required.
Clause II.2.8
E-discovery
Producing electronic information, e.g. under US procedural rules.
Clause II.2.13
Receivables loss after payment manipulation
When customers pay attackers because of fake bank details sent from your network.
Clause II.2.18
Cyber business interruption
Business interruption on-premises
Loss of income when your own IT systems fail – optionally extendable to technical problems.
Clause II.4.1, II.4.1.4
Business interruption from cloud outage
Loss of income when systems of a paid external provider fail.
Clause II.4.2
Side letters with a flat daily rate exist for both variants. They replace the terms only if expressly agreed; for cloud outages the provider must then be at least ISO 27001 certified or classed as a Tier 3 data centre. The time excess and indemnity period in the schedule apply.
Key limits and conditions
- Obligations apply before an incident, in particular data backups, patch management and handling of legacy systems.
- After an incident: notify without delay and follow the insurer's instructions.
- Exclusions include intent, war and cyber operations, failures of technical infrastructure, property damage and bodily injury, and contract performance.
- Sums insured, excesses and limits are set out in the policy schedule.
- Truthful answers in the application are required; breaches can jeopardise cover (§ 19 VVG).
Frequently asked questions
Is CEO fraud covered automatically?
No. Cyber fraud only applies if a limit for it is agreed in the policy schedule.
Is business interruption always included?
No. On-premises, technical problems and cloud outage are each covered only if agreed.
Does emergency assistance count against the sum insured?
According to the terms, no – and no excess applies.
Selected partner offer
Sources and status
- Hiscox CyberClear Bedingungen 01/2026
- Hiscox Allgemeine Regelungen 01/2019
- Hiscox Informationsblatt zu Versicherungsprodukten, Modulares Produkt 06/2022
- Hiscox Sideletter Cyber-Betriebsunterbrechung mit Tagessatz, On-Premises und Cloud, 10/2022
- Hiscox Mitteilung nach § 19 Abs. 5 VVG
Checked on 6 Oct 2026 against the provider documents. Only the terms and your policy schedule are binding.