Introducing the 2025 Cyber Claims Study by NetDiligence
NetDiligence, a prominent name in providing cyber risk readiness and response solutions, has unveiled its 2025 Cyber Claims Study. This comprehensive analysis covers over 10,000 cyber insurance claims, reflecting data from incidents reported between 2020 and 2024. As the study enters its fifteenth year, it continues to serve as a vital resource for cyber insurers, brokers, legal advisors, and risk management professionals seeking reliable insights into the repercussions of cyber events.
The Evolution of Cyber Threats
Mark Greisiger, President of NetDiligence, stated that the repercussions of cyber threats are perpetually evolving. Through the aggregation and analysis of a high volume of real cyber claims, NetDiligence is empowering the industry to move beyond speculation and address cyber risks with enhanced clarity.
Key Insights from the 2025 Study
The 2025 Cyber Claims Study presents numerous key insights that offer a deeper understanding of cyber incidents:
- 10,402 total claims analyzed
- 4,108 new claims collected in the most recent year, including 1,691 from known 2024 events
- 9,171 claims qualified under the financial analysis criterion of exceeding $1,000 in total incident costs
- Ransomware and Business Email Compromise (BEC) continue to top the list of loss causes
- Recovery and business interruption costs are escalating, particularly affecting small to medium enterprises (SMEs)
A Diverse Dataset
The dataset for this year's study was enriched with contributions from leading cyber insurers, capturing organizations of various sizes ranging from under $12,000 to over $230 billion in annual revenue. The analyses include diverse variables such as sector, revenue bands, causes of loss, and types of impacted data. This broad dataset ensures that stakeholders can assess trends and make informed decisions.
Claims Breakdown: SMEs vs. Large Corporations
As seen in previous studies, SMEs represented the largest segment of claims. Nevertheless, large enterprises—despite making up only about 2% of the dataset—represented over half of all incurred incident costs. This disparity highlights the complexities and scale at which larger organizations operate.
Furthermore, across various claim sizes, costs pertaining to legal services, crisis response, recovery, and business interruption remain substantial. Specifically, there are instances where the losses from business interruptions have surpassed $1 million.
New Developments in the 2025 Study
The 2025 dataset incorporates several significant updates and enhancements:
- Expanded data from 2024 incidents, which was collected and validated early in the year
- Identification of over 1,100 new claims from previous years (2022–2023)
- A consistent cost threshold of $1,000 applied across multiple years to maintain comparative clarity
These advancements render the 2025 study the most comprehensive dataset available to date.
Future Opportunities for Participation
For cyber insurers keen on contributing to the upcoming year's study, it is encouraged to reach out to NetDiligence promptly. Engaging in this initiative enhances transparency and provides invaluable insights to the industry.
Accessing the Study Through eRiskHub®
Clients of participating carriers and eRiskHub® users can access the full report along with sector-specific companion resources through their respective portals. Additional insights and tools derived from the study's data will also be made available within the eRiskHub platform, benefiting members even further.
About NetDiligence®
NetDiligence is an esteemed provider of cyber risk management software and services, well-regarded in the cyber insurance sector for over two decades. Their offerings include the eRiskHub® portal, Breach Plan Connect®, and the Cyber Risk Summit conference series. The Cyber Claims Study by NetDiligence has established itself as the premier benchmarking tool designed for real-world cyber incidents.
Frequently Asked Questions
What is the objective of the 2025 Cyber Claims Study?
The study aims to analyze actual cyber insurance claims to provide insights into the financial impacts of cyber incidents.
How many claims were analyzed in this year’s study?
A total of 10,402 cyber insurance claims were analyzed in the 2025 study.
What are the primary causes of loss identified?
The main causes of loss highlighted are ransomware attacks and Business Email Compromise (BEC).
Who can access the full study?
Clients of participating carriers and eRiskHub® clients can access the full report and other resources through their portals.
How can organizations contribute data to the next study?
Organizations wishing to participate in the next study can contact NetDiligence for information on becoming a data contributor.
