Cyber Insurance for Tradespeople in Germany (Handwerker)

By the Mein-Vergleich-Portal Editorial team. Reviewed for the German commercial insurance market, last updated 31 May 2026.

Cyber insurance for tradespeople in Germany starts at around 250 EUR per year for a solo business and covers the bill after a cyberattack: business interruption, IT forensics, ransom advice, and the cost of getting your data back. Unlike a general cyber policy for German SMEs, a tradesperson carries risks that sit inside the workshop itself: IoT-connected CNC machines, Smart-Home and building-automation installations, and remote-maintained heating systems that all reach back into a customer property. That is the gap this page works through, trade by trade. The context is large: Germany has more than one million registered Handwerksbetriebe (ZDH, 2024), and a Signal Iduna study found that roughly one in five tradespeople has already been hit by a cyberattack, while 74 percent still rate their own risk as low. That gap usually closes the morning a ransomware note appears on the workshop PC.

Damage Examples from the Trades

Most attacks on tradespeople run the same way. An employee opens a fake email, clicks an attachment, and a few hours later the business stops. Here are three cases that show up again and again in German workshops.

Special Risks for Tradespeople

Bitkom reports that 87 percent of German businesses were hit by cyberattacks in 2024, with total losses of 289.2 billion EUR (Bitkom, 2024). Tradespeople sit in the line of fire for a few specific reasons.

Most workshops run on simple IT that nobody manages full time. The Signal Iduna study found that 75 percent of tradespeople think their business is too small to interest criminals. Attackers do not work that way. Their scans are automated and hit any size of target, and a business with an open, unpatched network is an easier mark than a corporation with its own security team. What sets a Handwerksbetrieb apart from a desk-only SME is the connected hardware: a compromised CNC controller or a hijacked Smart-Home gateway can halt production or expose a customer's building, not just a spreadsheet.

Typical Attack Vectors in the Trades

• Phishing (fake emails): 81 percent of surveyed tradespeople named emails with malicious attachments as the biggest threat (Signal Iduna)
• Weak passwords: 47 percent see insecure passwords as an entry point
• Ransomware: Encryption trojans bring the entire business to a halt. According to Coveware 2024, the average downtime after a ransomware attack is around 23 days
• Online banking fraud: Manipulation of transfers through compromised computers or stolen access data
• Connected machines and IoT: Smart home installations, connected heating systems, and CNC machines can become entry points with inadequate security

What Cyber Insurance for Tradespeople Should Cover

Policies are not built the same way, and the fine print is where they differ. These are the components that matter most for a workshop. For the price side of the same question, see our cyber insurance costs overview.

Own Damages

• Business interruption: Compensation for lost revenue during downtime
• Data recovery: IT forensics (investigation after an attack) and recovery of encrypted or deleted data
• Cyber extortion: Support and cost coverage for ransomware attacks
• Online banking damage: Reimbursement in case of transfer fraud

Third-Party Damages and Liability

• Data protection liability: When customer data falls into the wrong hands due to the attack
• Legal advice: Support with GDPR reporting obligations and compensation claims
• Notification costs: Costs for notifying affected customers after a data breach

Additional Modules

• 24/7 Crisis hotline: Immediate help from IT experts in case of damage
• Reputation protection: PR consulting after publicly known incidents
• IoT protection: Coverage for connected machines and devices

What Does Cyber Insurance Cost for Tradespeople?

Price tracks three things: business size, revenue, and how digital the operation is. For scale, the GDV puts the average cyber loss in Germany at 45,370 EUR per case (GDV, 2024), while the yearly premium sits far below that. The table shows where the bands start.

Put that next to the loss. A single ransomware attack can stop a workshop for several weeks, and the bill for IT recovery, lost revenue, and possible data-protection fines runs well past the annual premium. We break the numbers down by company size on our cyber insurance costs page.

Cyber Risks by Trade

Not every tradesperson carries the same cyber risk. The deciding factor is the degree of digitization. The Bitkom study 2025 shows: 85 percent of tradespeople offer at least one digital service, while 96 percent cite IT security concerns as the biggest hurdle in digitization.

Coverage Gaps and Exclusions

Before taking out cyber insurance, tradespeople should carefully examine the policy terms. The following limitations are common and can cause problems in case of damage.

• Obligations for IT security: Missing backups or outdated software can lead to benefit reductions
• Waiting periods after policy start: Some policies only cover damage after a waiting period of 7 to 30 days
• Sublimits: Individual services like online banking fraud may be capped at lower amounts
• Intentional misconduct: If employees knowingly violate security policies, coverage does not apply
• War and state attacks: Cyberattacks classified as warlike actions are typically excluded
• Pre-contractual damages: Attacks that occurred before insurance began but were only discovered later

NIS-2: What Does This Mean for Tradespeople?

The NIS-2 Directive (Network and Information Security Directive 2) has been in force since December 2025 and directly affects around 29,500 businesses in Germany according to BSI. Tradespeople are in most cases not subject to direct obligations.

The indirect pressure is real, though. Larger clients and general contractors who fall under NIS-2 themselves now pass the requirement down the chain and ask subcontractors to prove their IT security. For a tradesperson, a cyber policy is one piece of that proof and can be the difference between keeping a contract and losing it. Our guide to cyber risks for SMEs goes deeper on the supplier-chain angle.

Improve IT Security, Reduce Premium

Insurers pay you back for good security. Hiscox grants up to 10 percent off, HDI up to 7.5 percent, for measures you can document. Each step below lowers your real risk and your premium at the same time.

1. Regular backups: Weekly on external media or cloud, stored separately from the network
2. Software updates: Keep operating system, accounting software, and router up to date
3. Employee training: Recognize phishing (fake emails), use secure passwords
4. Multi-factor authentication: Additional security layer when logging in, especially for online banking and email
5. Firewall and antivirus: Professional solution instead of consumer products, regularly updated
6. Emergency plan: Documented procedure for emergencies, with contact details of IT service provider and insurer

More information on protection against the most common threat is available in our Ransomware Protection Guide.

What Tradespeople Should Consider When Comparing

Premium and coverage amount are the obvious numbers, but they are not the whole decision. These six criteria carry more weight for a workshop than for a desk-only business. Our comparison methodology is explained on How We Compare.

1. Coverage amount appropriate for the business: Orient yourself by annual revenue and amount of stored customer data
2. Business interruption protection: Check the maximum compensation period and daily rates
3. Deductible (share in case of damage): Lower deductible means higher premium, but less out-of-pocket costs in case of damage
4. IoT coverage: The deciding clause for businesses with connected machines, CNC controllers, and smart building technology
5. 24/7 Crisis hotline: Immediate help in case of damage can significantly limit the damage
6. Obligations: What IT security measures does the insurer require as a prerequisite for full coverage?

How Tradespeople Differ from Other Cyber Insurance Buyers

Cover needs split by who holds the risk. A freelancer mostly protects client data on a laptop; a general German SME buys by headcount and revenue band. A tradesperson sits apart because the exposure reaches into physical kit and onto customer sites: connected CNC machines, building automation, and diagnostic tools that an attacker can turn into an entry point. If your work touches any of those, start with this page. These neighbouring guides cover the rest:

• Cyber Insurance for SME (general commercial businesses)
• Cyber Insurance for Freelancers (solo self-employed)
• Cyber Insurance for IT Service Providers (IT trade, system houses)
• Professional Liability (supplementary liability coverage)
• D&O topics (owner liability for larger businesses)

Conclusion

Tradespeople are now a regular target, not a rare one. Ransomware can lock up order planning, and one phishing email is enough to spill customer data. A policy for a Handwerksbetrieb starts at around 250 EUR per year and scales with business size, which is small money against the average German cyber loss of 45,370 EUR (GDV, 2024).

One point decides whether the cover is worth anything to you: business interruption. Check that the policy pays for lost revenue during downtime, and that its IoT clause actually names connected machines. An encrypted CNC controller or a frozen invoicing system can stop a workshop for days, and that loss is usually larger than the data recovery bill. When you are ready, you can compare cyber insurance costs band by band.