45% of organizations reported that their cyber insurance policy could be voided if required security controls were not in place.

70% of organizations reported an increase in their insurance costs in the past year.

41% of organizations cited Privileged Access Management as the top differentiator in how underwriters viewed their insurability.

Only 33% of cyber insurance policies cover lost revenue, and 45% cover ransomware negotiations or payment.

86% of organizations reported that their insurers offered premium reductions or credits for their use of AI in security controls.

72% of organizations filed a cyber insurance claim in the past year, marking a 10-point increase from 2024.

46% of organizations that filed claims reported that the incident triggering their claim was either identity-related or caused by a privileged account compromise.

51% of organizations were required to adopt an insurer’s preferred security solution or appliance to secure coverage.

97% of organizations indicated that identity-related controls influence their cyber insurance premiums or coverage terms in some way.

64% of organizations that experienced a decrease in overall cyber insurance costs in the past year credited AI adoption as a key factor.

In 2024, there was a 17% increase in the number of cyber insurance policies taken out by UK businesses compared to the previous year.

There was a 230% year-on-year increase in the amount paid out to support UK businesses with cyber-attacks in 2024, amounting to £138 million more than in 2023.

Malware and ransomware accounted for 51% of all cyber insurance claims in 2024, up from 32% in 2023.

In 2024, £197 million was paid out to UK businesses to help them recover from cyber incidents.

CISO confusion about cyber insurance policy coverage for supply-chain attacks decreased from 58% in 2024 to 43% in 2025.

The percentage of companies constantly re-evaluating tools to improve cyber insurance premiums dropped from 68% in 2024 to 40% in 2025.

In 16% of large ransomware claims, attackers leveraged compromised or weak credentials to gain entry.

Between 2019 and 2023, retail experienced large losses primarily from ransomware (50.0%), followed by other causes (30.0%) and data breaches (20.0%).

Between 2019 and 2023, manufacturing experienced large losses primarily from ransomware (86.7%), followed by other causes (10.0%) and data breaches (3.3%).

Vendor-driven cyber insurance claims notifications fell from 37% to 26% of all claims, representing a 30% drop.