Cyber Security Resilience 2025 Report

This report presents an analysis of cyber security resilience trends for 2025, focusing on claims and risk management in the context of evolving cyber threats. It outlines how attackers are shifting their focus from large corporations to mid-sized and smaller firms, which are less resilient. The report details that ransomware remains a significant driver of cyber insurance claims, with a notable increase in incidents involving data exfiltration. It documents the overall frequency of cyber claims and highlights the emergence of non-attack incidents, such as technical failures and privacy litigation, as growing sources of losses. The report also emphasizes the importance of effective detection, response, and training in reducing claim costs, noting that many incidents could have been prevented through basic cyber hygiene practices. Additionally, it discusses the widening resilience gap between insured and uninsured organizations, reflecting the effectiveness of risk prevention services provided by insurers.