We are part of the Helvetia Baloise Group.
-
Cyberattack: when suddenly nothing works any more
27.08.2025 | Sonja EnglAn SME was hit by a ransomware attack. The malware brought the company to a standstill, and attackers demanded a ransom. Team Helvetia’s cooperation network meant it was possible to react quickly and minimise damage.
Cyberattack: when suddenly nothing works any more
A fateful morning
A Monday morning in August – the start of a normal working week. But when employees tried to log into the operating system, it quickly became clear that nothing was working any more. No access to appointments, orders or customer or phone data – all digital processes were blocked. The trades business* had been hit by a cyberattack. Unknown persons had installed malware that encrypted all the data and completely paralysed the digital process in order to extort the business. The attackers demanded a ransom of $300,000 to release the system.
Rapid assistance from Helvetia cooperation partners
After discovering the ransomware attack, the small business turned to its IT service provider, which knew that the trades business had cyber insurance with Helvetia and immediately contacted the insurance company. Helvetia operates a 24/7 cyber hotline for incidents like this and has a network of experts that can provide rapid assistance. Helvetia recommended that the IT service provider should contact Helvetia’s cyber cooperation partner Compass Security AG, which specialises in security assessments and incident response. On the same day, Compass took over the negotiations with the cybercriminals and helped the business overcome the crisis.
Cyber insurance as a component of the risk strategy
Being there when it counts pays off: the business was able to use its IT systems again just five days after the cyberattack. And it got them back without having to pay a ransom, but instead thanks to fast and professional support and data recovery by specialist IT experts. And due to the fact that the business regularly performs data backups that are protected against ransomware. These could be accessed despite the encryption of the system, and data loss was limited to five working days. Thanks to its cyber insurance, Helvetia was able to reimburse the trades business for the majority of its financial expenses – such as for data recovery, system cleaning, support from external IT experts and damage analysis.
This incident underscores the importance of a robust cybersecurity strategy. The combination of preventive measures and cyber insurance helps you protect your company against attacks and quickly get up and running again in an emergency.
“Ransomware attacks usually strike SMEs unexpectedly and at the worst possible time. The shock is huge, the pressure enormous. We’re there for moments like these around the clock. Our crisis-tested team brings calm to the chaos and provides support with technical expertise and a clear structure. We know how attackers work from numerous incidents, provide pragmatic clarification and negotiate with tactical sensitivity. Our top priority is to get companies up and running again quickly. The satisfaction and relief when a business is able to start operating again is a huge motivation for us.”
Prevention measures: How to protect your company from cyber risks.
Data loss can threaten a company’s very existence. Alongside cyber insurance, take precautions with preventive measures.
