Key Findings
Business Email Compromise and Funds Transfer Fraud accounted for 58% of cyber incidents.
Among 2025 funds transfer fraud claims, 52% originated from business email compromise.
A record 86% of businesses refused to pay ransom demands.
BEC claims frequency rose 15% year-over-year in 2025 while severity decreased 28% year-over-year to an average loss of $27,000.
FTF claims frequency decreased 18% year-over-year in 2025 and severity decreased 14% year-over-year to an average loss of $141,000.
Ransomware attacks involving data theft cost more than twice as much as ransomware attacks without data theft.
Dual-extortion ransomware accounted for 70% of all ransomware claims in 2025.
Funds Transfer Fraud was the second-most common cyber event, accounting for 27% of claims.
Initial ransom demands surged 47% year-over-year in 2025.
Businesses with more than $100 million in revenue faced a claims frequency five times higher than smaller organizations.
Ransomware was the most costly type of cyber claim in 2025 with an average loss of $269,000.
Overall global claims frequency rose 3% year-over-year in 2025.
Global claims severity decreased 19% year-over-year in 2025 to an average loss of $116,000.
Claims severity for businesses with more than $100 million in revenue decreased 7% year-over-year to an average loss of $268,000.