Hiscox CyberClear: presentation, guarantees and limits in 2026

Common use by policyholders: coverage of immediate response costs (forensic, notification, public relations), compensation for incident-related business losses and coverage of ransom demands in certain cases. Highlight noted by users: rapid coverage of initial incident response costs, facilitating business continuity after an attack.

Good fit contexts: small and medium-sized businesses handling customer data, consultancies, web agencies and online stores. Effective for structures with limited IT teams, requiring external support for incident management and regulatory compliance.

Limits and irritants observed: sometimes high deductibles for certain items, insufficient coverage limits for major business interruption impacts, exclusions linked to proven negligence on systems maintenance. Processing times for certain complex cases available, but which can lengthen the resolution time.

Level of complexity for a first-time subscriber: moderate subscription formalities, often accompanied by a questionnaire on security practices (updates, backups, authentication). Frequent prerequisites: inventory of digital assets, description of security measures in place and proof of regular backups. For more sensitive files, a prior assessment by an expert may be requested.

Elements facilitating underwriting and day-to-day management:

• online quotation and product documentation accessible on the site
• assured space for tracking contracts and claims
• telephone assistance and outsourced crisis management
• online claims declaration support
• accompaniment by broker or dedicated advisor as required

Basic package - starting at €50/month. Aimed at very small businesses and the self-employed with limited exposure to sensitive data. Key guarantees: coverage of limited technical response costs, breach notification assistance and basic legal coverage. Profiles concerned: micro-businesses, freelancers, low-volume online stores.

Standard package - indicative price: approx. €100/month. Covers common needs for VSEs/SMEs: forensic investigations, notification and public relations costs, extended legal protection and partial compensation for incident-related business losses. Profiles concerned: companies with a moderate volume of online transactions and customer data processing.

Premium package - indicative price: from €200/month. Designed for exposed or high-risk businesses, including higher coverage limits, ransomware negotiation cover according to clause, preventive assistance (audit) and extension for prolonged business interruption. Profiles concerned: IT service providers, high-traffic e-commerce companies, firms managing sensitive data. Typical coverages include:

• forensic and system restoration
• notification and communication costs
• coverage of legal costs and third-party claims
• compensation for business interruption up to ceiling

Main guarantee: coverage of incident response costs. Role: finance the intervention of forensic teams and experts to identify the cause of the incident, contain the attack and restore systems. General operation: triggered after the claim has been declared, put in touch with approved service providers and reimbursed costs up to contractual ceilings. Typical coverages:

• forensic analysis and data restoration
• containment and neutralization costs
• restoration costs

Second key coverage: civil liability and legal protection linked to data leaks. Role: cover third-party claims and legal defense costs. How it works: coverage of defense costs and compensation, subject to contractual exclusions and ceilings. Situations covered: customer action following a leak, recourse by a third party affected by a data compromise.

Optional coverages: extensions designed for specific needs, such as ransomware coverage, long-term business interruption extension, protection against identity theft and social engineering, as well as preventive services (audit, training). These options complement standard protection by targeting emerging risks or those with a high financial impact.

Interest of options according to profiles: companies exposed to targeted attacks can take out ransomware and extortion negotiation cover, while companies whose business is highly dependent on online systems will benefit from a business interruption extension. Typical options available:

• ransom negotiation and payment (subject to conditions)
• long-term business interruption extension
• post-incident assistance and enhanced public relations
• protection against president fraud and social engineering