Cyber insurance coverage limits and sublimits explained

Cyber insurance policies for private individuals often include specific limitations and structures to manage the unpredictable nature of digital risks. According to Lukas Spohr from the IT industry association Bitkom, insurers frequently use 'sublimits'—specific sum limitations for particular types of costs—to mitigate risk in highly vulnerable areas.

In the private sector, typical insurance sums generally range between 10,000 and 50,000 euros depending on the specific component and insured danger. Insurers may also implement deductibles to prevent policy misuse. Because the costs of cybercrime, such as ransom demands or account damages, are difficult to predict and can occur with significant delays, these financial constraints are common.

Data from Bitkom Research indicates that in 2025, only two percent of internet users in Germany had taken out standalone cyber insurance. This is partly because existing coverage, such as household, legal protection, or private liability insurance, may sometimes cover certain damages resulting from viruses or identity theft.