REPORT

The 2025 InsurSec Report: All Claims Edition

Cyber risk continues to grow for small and mid-sized businesses, often with serious consequences.

In 2024, average ransomware severity grew to nearly half a million dollars, financial fraud once again plagued businesses as the single most common incident type, and the blast radius of third party risk continued to expand.

Get insights from a year’s worth of claims and cybercrime data to better understand how threat actors have evolved, the cost of today’s cyber incidents, and the technologies associated with the most risk.

Download your copy

The 2025 InsurSec Report: All Claims Edition

Thank you

Download to view the content.

Attackers are finding their sweet spot

Attackers are finding their sweet spot

Mid-sized companies with revenue between $25M-$100M saw a 46% increase in ransomware frequency and 47% increase in severity. These businesses are a sweet spot for attackers: sizable enough targets to produce profitable outcomes, but small enough to not have the sophisticated security of larger companies. Get more insights about evolving attacker tactics and the financial fallout victims face.

Remote access tools were the initial entry vector for 80% of ransomware claims.

Read the report now

Read the report now

Businesses deserve more transparency, software companies responsible for the worst outcomes should be held accountable, and the risk associated with threat actors’ evolving tactics should be laid out in precise terms. We believe this information can help turn the tide against ransomware and further safeguard businesses of all sizes.

All statements for At-Bay, Inc. companies.