32% of IT decision-makers conduct monthly testing of disaster recovery plans.

LLMs have the lowest resolution rate of all application types, with just 38% of high-risk issues being fixed.

One in five organizations experienced an LLM security incident in the last year, while a further 18% are unsure and 19% preferred not to answer.

57% of C-suite executives believe their organization consistently meets remediation SLAs, yet only 15% of security practitioners agree.

33% of organizations reported significant security budget growth in the past year, while 50% saw incremental increases.

In 2025, AI enabled attackers to automate up to 80–90% of a specific nation-state espionage campaign.

46% of security decision makers identify ransomware attacks as a leading concern, 44% identify cloud environment breaches, 37% identify email compromise, 37% identify data theft, and 35% identify supply chain compromise.

In January 2026, bots accounted for 49% of all requests, nearly matching human traffic at 51%.

A year ago, 55% of AI models failed basic vulnerability research and 93% failed exploit development tasks

In 2025, the U.S. accounted for roughly one-third of global ransomware incidents.

In 2025, ransomware accounted for 36% of security incidents affecting financial institutions.

The financial sector was the second-most expensive industry for data breaches, at $5.56 million per breach.

Third-party involvement occurs in 30% of financial-sector breaches.

In 2025, approximately 12.8% of B2B financial organizations experienced ransomware.

In 2025, data breaches accounted for 64% of security incidents affecting financial institutions.

Akira accounted for more than 40% of all ransomware claims in At-Bay’s portfolio for the full year.

86% of Akira attacks occurred in environments where a SonicWall device was present.

The largest single business interruption claim hit $5M, the policy limit.

Roughly one in 10 ransomware incidents caused downtime exceeding 30 days.

Financial fraud was the most common incident type for the third consecutive year, accounting for 30% of all claims.