Key Findings
Businesses with more than $100 million in revenue faced a claims frequency five times higher than smaller organizations.
Ransomware attacks involving data theft cost more than twice as much as ransomware attacks without data theft.
Business Email Compromise and Funds Transfer Fraud accounted for 58% of cyber incidents.
Among 2025 funds transfer fraud claims, 52% originated from business email compromise.
A record 86% of businesses refused to pay ransom demands.
BEC claims frequency rose 15% year-over-year in 2025 while severity decreased 28% year-over-year to an average loss of $27,000.
FTF claims frequency decreased 18% year-over-year in 2025 and severity decreased 14% year-over-year to an average loss of $141,000.
Dual-extortion ransomware accounted for 70% of all ransomware claims in 2025.
Funds Transfer Fraud was the second-most common cyber event, accounting for 27% of claims.
Initial ransom demands surged 47% year-over-year in 2025.
Ransomware was the most costly type of cyber claim in 2025 with an average loss of $269,000.
Overall global claims frequency rose 3% year-over-year in 2025.
Global claims severity decreased 19% year-over-year in 2025 to an average loss of $116,000.
Claims severity for businesses with more than $100 million in revenue decreased 7% year-over-year to an average loss of $268,000.