Some things are unpredictable: Up to what level does cyber insurance provide coverage?

A cyber insurance policy? Such a policy that offers protection against internet crime is not always recommended for private individuals. This is because sometimes the household contents insurance, legal protection insurance or private liability insurance covers possible damage caused by viruses or identity theft.

As of 2025, only two percent of internet users in this country had taken out a standalone cyber insurance policy, according to a survey by Bitkom Research.

The thing about sublimits - this is how insurers limit their risk. But if you have such a policy, to what extent do insurers pay out in the event of a claim?

"Insurers often work with an agreed insured sum per year or per claim and control particularly risk-prone components using so-called sublimits," explains Lukas Spohr from the IT industry association Bitkom.

Sublimits, according to Spohr, are sum limits for certain types of costs in order to reduce the risk for the insurance company. This is because cyber risks are diverse and difficult to assess.

For private individuals: insured sums often between 10,000 and 50,000 euros.

Damage can occur at a later time - and the extent of consequential costs, such as ransom demands or account damage, is often unpredictable, according to Lukas Spohr.

The frequency of damage can also only be determined with difficulty.

A deductible is also not uncommon in order to reduce the risk of abuse by the insured, explains Spohr.

Typical insured sums in the private sector, depending on the component and insured risk, are between 10,000 and 50,000 euros.