The cyber risk and insurance landscape in 2025 is characterized by a complex and evolving threat environment, as highlighted in the latest Cyber Security Resilience Outlook from Allianz Commercial. While large insured companies are enhancing their resilience against cyberattacks through improved cybersecurity measures, the reliance on digital supply chains, expanding privacy regulations, and sophisticated social engineering attacks are increasing the potential losses for all companies.
According to Michael Daum, global head of cyber claims at Allianz Commercial, although several ransomware events have made headlines in 2025, insured losses from such attacks have decreased due to enhanced detection and response capabilities. Daum emphasizes that the cost of a ransomware attack escalating to data theft and encryption can be significantly higher than incidents detected early.
An analysis of the first half of 2025 reveals that while the frequency of cyber incident notifications remained consistent with the previous year, claim severity has decreased by over 50%. This decline is attributed to the substantial investments made by larger companies in cybersecurity, detection, and response mechanisms.
Ransomware attacks continue to be a prominent driver of cyber incidents, with attackers increasingly targeting smaller or mid-sized companies that may have weaker cybersecurity defenses. The total number of cyber claims in 2025 is projected to remain stable, with a surge expected towards the end of the year, especially around Black Friday.
The shift towards double extortion ransomware attacks, including data exfiltration, has been notable in 2025. Data breaches involving data exfiltration have seen a significant increase in value, underscoring the importance of stringent data privacy regulations. The retail sector has emerged as one of the most vulnerable industries to cyber incidents, ranking third after manufacturing and professional services firms.
In Germany, the cyber insurance industry has witnessed a 70% increase in the loss impact of cyber insureds over four years, highlighting the growing economic impact of cybercrime. Despite the predicted growth of the global cyber insurance market to nearly US$30 billion by 2030, penetration remains relatively low, with companies often unaware of the extensive coverage cyber insurance offers.
Jarrod Schlesinger, global head of financial lines and cyber at Allianz Commercial, stresses the crucial role of cyber insurance in enhancing resilience amid rapid technological advancements and regulatory changes. He emphasizes that cyber insurance coverage encompasses breach response costs, business interruption, and regulatory fines, offering comprehensive protection against cyber risks.
Reference from News: Manufacturing, Retail, Professional Services Sectors Most Impacted by Cyber Incidents: Study