Resilience

The manufacturing sector experienced a 61% year-over-year surge in ransomware attacks in 2025, the sharpest growth of any industry.

Connected IoT device counts in manufacturing facilities are projected to more than double between 2025 and 2030.

Ransomware represented only 12% of claim volume among manufacturers despite accounting for the majority of incurred losses.

Individual extortion demands in healthcare reached as high as $4 million in the first half of 2025.

Average claim severity in Resilience's healthcare portfolio increasesd from $800,000 in 2024 to more than $2 million per incident in 2025.

Healthcare organizations that establish a data governance committee achieve more than three times the risk reduction compared to organizations in other industries.

In the second half of 2025, more than two-thirds of ransomware attacks leveraged data theft instead of encryption.

Data theft-only attacks account for 57% of all attacks in 2025.

Vendor-related losses represent 18% of total losses in Resilience's 2025 claims portfolio.

Vendor-driven cyber insurance claims notifications fell from 37% to 26% of all claims, representing a 30% drop.

Financially motivated social engineering, particularly tailored attacks enhanced by AI-powered phishing content, fuelled a disproportionate share of incurred losses (88%).

Healthcare, retail, and manufacturing remained the most targeted sectors.

Third-party risks accounted for 31% of all client insurance claims and 23% of material losses in 2024. In 2023, no third-party claims led to material losses for Resilience clients.

62% of insurance claims with losses were related to ransomware.

Ransomware attacks targeting vendors made up 42% of the third-party insurance claims, with losses from these incidents rising four-fold compared to 2023.

Wrongful data collection caused 12% of manufacturing claims, driven primarily by website tracking and pixel-related litigation.

MFA misconfiguration accounted for approximately 26% of all incurred losses in Resilience's manufacturing portfolio.

Phishing and transfer fraud accounted for roughly 30% of all manufacturing claims.

The average transfer fraud event costs roughly ten times more than the average email compromise in manufacturing claims.

Fewer than one in fifteen internet-accessible SSH servers globally have adopted quantum-resistant encryption.

Having no MFA at all accounted for approximately 8% of incurred losses in Resilience's manufacturing portfolio.

Ransomware accounted for about 90% of total incurred losses in Resilience's manufacturing insurance portfolio over the past five years.

Software vulnerability exploits account for approximately 13% of incurred losses in Resilience's manufacturing portfolio.

Manufacturing accounted for more than one in four of all global cyberattacks in 2025 and had been the most targeted industry for five consecutive years.

Social engineering drove 88% of material losses in the first half of 2025 in Resilience's healthcare portfolio, making human error the industry's single most consequential vulnerability.

Extortion demands to suppress stolen data comprise 49% of extortion claims in the first half of 2025 and 65% of extortion claims in the second half of 2025.

Infostealers harvested more than 2 billion credentials.

Despite a drop in notifications, vendor-related claims still accounted for 15% of incurred losses estimated so far in 2025.

Manufacturing faced several ransomware incidents, generating cyber insurance claims averaging over $1 million in severity.

The average cost of an individual ransomware attack rose by 17% in the first half of 2025.

Healthcare experienced extortion demands as high as $4 million.

Healthcare, retail, and manufacturing remained the most targeted sectors.

Ransomware targeting vendors contributed to 18% of material insurance claims.

First-party ransomware incidents made up 44% of client’s material insurance claims.

Vendor security failings accounted for 4% of all material insurance claims.

Transfer fraud claims made up 18% of insurance claims in 2024, compared to 14% in 2023.

Phishing-related cyber incidents made up 9% of incurred claims in 2024, a 55% fall compared to 2023.