Global cyber insurance claims hit record high amid surge in ransomware severity

Global cyber insurance claims reached unprecedented levels in 2026, driven by a sharp increase in ransomware attacks, financial fraud, and related litigation. The average cost of a ransomware incident has climbed to an all-time high of $221,000, marking a significant escalation in the severity of cyber threats facing businesses worldwide.

The surge in claims reflects a broader trend of escalating cyber risks across multiple sectors. Technology companies, financial institutions, insurance firms, healthcare providers, and manufacturing entities are reporting increased exposure to digital threats. Smaller companies, often lacking robust cybersecurity infrastructure, have been particularly vulnerable to these attacks.

Ransomware remains the primary driver of the spike in insurance payouts. The At-Bay report indicates that the average ransom demand has risen substantially, with attackers targeting organizations that are more likely to pay to restore critical operations. The financial impact extends beyond ransom payments, encompassing costs related to incident response, data recovery, legal fees, and regulatory fines.

Financial fraud losses have also increased significantly, contributing to the overall rise in claims. Fraudulent activities, including business email compromise and identity theft, have become more sophisticated, enabling attackers to bypass traditional security measures. These incidents often result in substantial financial losses for victims, further straining insurance resources.

Lawsuits stemming from data breaches and cyber incidents have added another layer of complexity to the claims landscape. Organizations facing litigation over data protection failures are incurring additional costs, including legal defense and settlement expenses. The rise in litigation reflects growing scrutiny of corporate cybersecurity practices and increased accountability for data breaches.

The data, which covers more than 100,000 policy years of claims, underscores the global nature of the crisis. Cyber threats are no longer confined to specific regions or industries, but have become a universal challenge for businesses of all sizes. The increasing frequency and severity of attacks suggest that the trend is likely to continue unless significant changes are made to cybersecurity strategies.

Industry experts warn that the current trajectory could lead to higher premiums and stricter underwriting standards for cyber insurance policies. As insurers reassess their risk exposure, some may limit coverage or exclude certain types of cyber incidents from their policies. This could leave many organizations, particularly smaller ones, with limited protection against cyber threats.

The situation raises questions about the long-term sustainability of the cyber insurance market. As losses mount, insurers may struggle to maintain profitability while continuing to provide coverage. The balance between risk management and affordability remains a critical issue for policymakers, business leaders, and insurers alike.

With cyber threats evolving rapidly, the challenge of protecting digital assets and managing financial risks continues to grow. The coming months will be crucial in determining how the industry adapts to these new realities and whether effective solutions can be implemented to mitigate the impact of future attacks.