Coalition’s 2026 Cyber Claims Report Finds Initial Ransom Demands Surged 47% — But Most Businesses Refuse to Pay
Business email compromise and funds transfer fraud still comprise the majority of cyber insurance claims, data shows Vancouver, BC (Mar. 5, 2026) — Coalition, the world’s first Active Insurance provider designed to help prevent digital risk before it strikes, has released the findings of its 2026 Cyber Claims Report, revealing that initial ransom demands in the full-year 2025 surged 47% year-over-year (YoY). However, while ransomware actors substantially increased their demands, a record 86% of businesses refused to pay, suggesting that organisations have improved their cyber resiliency with viable data backups and incident response plans. “The data suggests a turning point in the economics of ransomware: while threat actors escalate their demands to push for higher, seven-figure payouts, cyber insurer support is helping businesses limit losses and is starting to help tip the scales back in favor of defenders,” said Rob Jones, Coalition’s Global Head of Claims. “Ultimately, we’re seeing the continuous partnership that Active Insurance offers between Coalition and our policyholders is reshaping the loss profile of cyber insurance and creating better outcomes.” While ransomware was the most costly type of claim in 2025 with an average loss of USD $269,000, business email compromise (BEC) and funds transfer fraud (FTF)...