Key Findings
In the second half of 2025, more than two-thirds of ransomware attacks leveraged data theft instead of encryption.
RansomwareData TheftEncryptionCyber Claims
Data theft-only attacks account for 57% of all attacks in 2025.
Data TheftRansomwareCyber Claims
Vendor-related losses represent 18% of total losses in Resilience's 2025 claims portfolio.
Vendor RiskInsurance LossesThird-Party RiskCyber Claims
Extortion demands to suppress stolen data comprise 49% of extortion claims in the first half of 2025 and 65% of extortion claims in the second half of 2025.
ExtortionRansomwareData TheftCyber Claims
Infostealers harvested more than 2 billion credentials.
Credentials TheftInfostealersCyber Claims