Loading story…
New reporting based on Verizon DBIR’s Breach Impact Study says cyber insurance claims data from roughly 70,000 incidents puts the median breach impact at about $83,000, with small and midsize businesses facing a median loss near $38,000 and the most severe cases climbing above $22 million for the top 2.5% of incidents at companies with more than $250 million in revenue. The findings argue insured losses are only a floor for total damage, as breach costs also expand through regulatory penalties, litigation, legal fees, and coverage gaps, particularly in heavily regulated sectors such as healthcare and financial services.
The data indicates business interruption accounted for roughly one-third of known losses in 2024 and can be more operationally significant than reputational harm, while third-party and supply-chain incidents were identified as the events most likely to exhaust cyber insurance limits. Separate reporting adds that ransomware and double-extortion attacks are increasing, with AI helping attackers scale operations, and that staffing shortages, shadow AI, and slow response times further raise losses; organizations using stronger identity controls, DevSecOps, lifecycle management, and faster incident response are better positioned to contain breach costs.
See attribution, scope, and your downstream exposure.
4 events from the most recent confirmed update back to the earliest known activity.
IBM-cited reporting said security incidents involving shadow or unsanctioned AI use increased from 20% in 2025 to 43% this year. The report described shadow AI as a leading factor increasing breach costs, alongside supply chain breaches and security complexity.
The Verizon study found that business interruption represented roughly one-third of all known insured breach losses in 2024. It highlighted business interruption as a more decision-relevant driver of breach impact than reputational damage.
Cited reporting said reported ransomware incidents increased from 34% in the prior year to 39% in the last 12 months. The same reporting noted attackers are scaling ransomware with AI and increasingly using double extortion by threatening to leak stolen data.
Verizon’s Data Breach Investigations Report team published a new Breach Impact Study based on roughly 70,000 real cyber insurance claims obtained through CyberAcuView. The study reports median and percentile-based insured losses rather than an average, including a median breach impact of about $83,000 and a median SMB loss of about $38,000.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ransomware continues to be the predominant cause of high-value cyber insurance claims in 2025, with attackers increasingly targeting small and mid-sized businesses as large enterprises bolster their defenses. According to Allianz’s Cyber Security Resilience 2025 report, 88% of breaches at smaller firms involved ransomware, compared to 39% at larger organizations, highlighting a shift in attacker focus toward easier targets. Ransomware accounted for approximately 60% of insurance claims exceeding €1 million in the first half of 2025, underscoring its financial impact. Attackers are evolving their tactics, moving beyond simple encryption to prioritize data exfiltration, which is often less resource-intensive and more likely to result in ransom payments. The value of stolen data is rising, and the average global breach cost is approaching $5 million, with privacy regulations and litigation risks compounding the financial exposure for affected organizations. Social engineering, phishing, and business email compromise remain prevalent, with generative AI making these attacks more convincing and credential abuse now the most common attack vector. Groups such as Scattered Spider exemplify the trend of using social engineering and credential theft to rapidly escalate attacks from account takeover to ransomware deployment. Retailers have become the most targeted sector in early 2025, following manufacturing and professional services in total losses, due to their large volumes of personal data and complex supply chains. Supply chain disruptions are also emerging as a significant source of cyber insurance claims, as interconnected business operations increase systemic risk. The evolving threat landscape is prompting organizations to reassess their cyber resilience strategies, with a focus on proactive defense measures and third-party risk management. The increasing sophistication of attacks, especially those leveraging AI and targeting operational technology, is driving a need for improved governance and contractual protections with suppliers. As attackers adapt, organizations must prioritize both IT and OT security, ensure executive support for resilience initiatives, and address hidden dependencies that could become blind spots in their defenses. The convergence of ransomware, data exfiltration, and supply chain vulnerabilities is shaping the cyber insurance market and influencing security priorities for businesses of all sizes in 2025.
Jun 29, 2026
IBM’s **2026 Cost of a Data Breach Study** found that the average global cost of a data breach rose **12% year over year** to nearly **$5 million**, while the **United States** recorded the highest national average at **$11.5 million**. **Healthcare** remained the most expensive sector globally at **$6.64 million per breach**, even after a 10.5% decline from the prior year, and **phishing** was identified as the most common initial access vector across industries, with an average breach cost of **$5.9 million**. The report said breach **identification and containment times increased** for the first time in five years, with **removable media** and **supply chain compromises** taking the longest to resolve. It also found that **AI-driven attacks** rose **56%** year over year, affected **one in four organizations**, and added roughly **$1 million** to average breach costs, while **shadow AI** incidents more than doubled. **Ransomware** remained a major driver of losses, with **39%** of breached organizations reporting at least one ransomware attack in the past year and attackers increasingly using **data leaks** and **public shaming** to pressure victims into paying.
Aug 4, 2026
Cybersecurity experts warned UK organizations not to treat cyber insurance as a substitute for operational resilience after a Cohesity survey found that only **22%** of business leaders believed their policy would adequately cover breach costs and lost revenue. Respondents estimated that a cyberattack would cut revenue by an average of **15.17%**, while one in five organizations had never modelled the business impact of a cyber incident. The warning aligns with UK government breach-survey findings on uneven cyber-risk preparedness and insurance coverage across businesses. Although cyber-insurance adoption increased during 2025 and insurers paid **£197 million** in cyber claims, organizations are urged to review exclusions and coverage limits, maintain tested recovery plans, model attack impacts, and regularly test restoration of critical services.
Sep 3, 2026