Rising Impact of Supply Chain Attacks on Cyber Insurance and Enterprise Risk

Supply chain attacks have become a major concern for organizations, with industry data showing that breaches involving third parties have doubled year over year and now account for approximately 30% of all data breaches. These attacks, which often target digital supply chains such as open-source software, SaaS platforms, and cloud services, have proven to be highly disruptive and costly, with average remediation costs exceeding $4.9 million and significant operational downtime. The most impactful supply chain incidents of 2025 have demonstrated the potential for digital compromises to trigger both digital and physical disruptions across multiple organizations simultaneously.

As the frequency and severity of supply chain attacks increase, cyber insurance providers are beginning to scrutinize policyholders' supply chain security controls more closely. Experts predict that the ability to obtain or renew cyber insurance—and even broader business-interruption coverage—will increasingly depend on the strength of an organization's software supply chain security and third-party risk management. While the current cyber insurance market is favorable for buyers, with lower premiums and broader coverage, this could change rapidly if supply chain-related claims continue to rise, prompting insurers to tighten requirements and increase rates.