As of: 14 Sep 2026
Summary
An insurer-funded survey reports attack and downtime figures for German SMEs.
What happened?
The 2026 Cyber Readiness Report states that 31% of surveyed German SMEs identified a successful attack or attempted attack during the previous year. The study reports average downtime of 41.7 hours for affected businesses. The survey was conducted by Wakefield Research on behalf of Hiscox.
Why does it matter?
The figures indicate how long an incident can halt operations. It is a survey commissioned by an insurer.
Who is most affected?
Small and medium-sized businesses in Germany.
What does it mean for businesses?
These are findings from commissioned survey research, not a prediction of your business's losses. They underline the value of planning recovery and business continuity.
What can you do now?
- 1Check how long your business could work without core IT
- 2Roughly define a fallback mode and recovery time
Editorial assessment
Our conclusion
For small businesses the main takeaway is that downtime can be the real cost driver. Regardless of the study, it is worth estimating your own recovery time realistically – the figures come from an insurer-funded survey.
Insurer-funded study. Cyberschutz.io plans an affiliate partnership with Hiscox.
Source
Hiscox Cyber Readiness Report 2026 (Study commissioned by Hiscox) · Source date
To the source (publisher website): www.hiscox.de/research/hiscox-cyber-readiness-report
Status / reviewed on: