Report by Resilience
Resilience 2025 Midyear Cyber Risk Report
Key Findings
Vendor-driven cyber insurance claims notifications fell from 37% to 26% of all claims, representing a 30% drop.
Healthcare, retail, and manufacturing remained the most targeted sectors.
Despite a drop in notifications, vendor-related claims still accounted for 15% of incurred losses estimated so far in 2025.
Manufacturing faced several ransomware incidents, generating cyber insurance claims averaging over $1 million in severity.
Financially motivated social engineering, particularly tailored attacks enhanced by AI-powered phishing content, fuelled a disproportionate share of incurred losses (88%).
The average cost of an individual ransomware attack rose by 17% in the first half of 2025.
Healthcare experienced extortion demands as high as $4 million.
Healthcare, retail, and manufacturing remained the most targeted sectors.