Multiple insurance: who pays for cyber damage?