{"id":24095,"date":"2025-09-11T16:13:14","date_gmt":"2025-09-11T16:13:14","guid":{"rendered":"https:\/\/insurance-canada.ca\/?p=83858"},"modified":"2025-09-11T16:13:14","modified_gmt":"2025-09-11T16:13:14","slug":"ransomware-costs-jump-17-in-2025-despite-fewer-cyberinsurance-claims-resilience","status":"publish","type":"post","link":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/2025\/09\/11\/ransomware-costs-jump-17-in-2025-despite-fewer-cyberinsurance-claims-resilience\/","title":{"rendered":"Ransomware Costs Jump 17% in 2025 Despite Fewer Cyberinsurance Claims: Resilience"},"content":{"rendered":"<h3 class=\"article-sub-headline\">AI-powered phishing, double extortion tactics, and insurance policy theft fuel more destructive, costly ransomware attacks<\/h3>\n<p>San Francisco, CA (Sept. 9, 2025) \u2013 The financial fallout of ransomware attacks is climbing even as the number of cyber insurance claims falls, according to new data from Resilience, a leading cyber risk solutions company. In the first half of 2025, the average cost of an individual ransomware attack rose by 17%, while the volume of incurred claims across Resilience\u2019s portfolio dropped by more than half (53%), highlighting the persistent and destructive threat of financially motivated cybercrime.<\/p>\n<p>Ransomware accounted for almost all (91%) of incurred losses in Resilience\u2019s portfolio in the first six months of 2025. Cyber criminals are using increasingly sophisticated and profitable extortion tactics, including AI-powered social engineering, double extortion (attacks that demand two separate payments, one for data decryption and another to prevent public data release), and the theft of an organization\u2019s cyber insurance policy to better benchmark and set higher ransom demands. These new strategies are fueling a threat landscape where fewer attacks can still cause immense financial damage.<\/p>\n<p>\u201cFinancial incentives are driving cyber criminals to be more clever and creative, and companies are facing larger losses than ever before,\u201d said Vishaal \u201cV8\u201d Hariprasad, Co-Founder and CEO of Resilience. \u201cCyber crime comes in waves. Attackers exploit a tactic until defenders catch up, then pivot to new weaknesses. Understanding the financial consequences of attacks and the most common points of failure is paramount to stopping that fallout at the root.\u201d<\/p>\n<p>By translating trends in the threat landscape into concrete financial consequences, this data offers a rare glimpse into the threat landscape as well as the cyber defense strategies with the highest potential ROI. Published today, Resilience\u2019s <strong><a href=\"https:\/\/unlock.cyberresilience.com\/2025midyear_risk_report_gated\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Midyear 2025 Cyber Risk Report<\/a><\/strong> leverages data from the company\u2019s Risk Operations Center (ROC) and insurance claims portfolio to analyze trends in hacking activity and industry responses in the first half of 2025. Additional report findings include:<\/p>\n<ul>\n<li>Financially motivated social engineering, especially via tailored attacks bolstered by AI-powered phishing content, fueled a disproportionate share of incurred losses (88%).<\/li>\n<li>Vendor-driven claims notifications fell from 37% to 26% of all claims, a 30% drop; however, vendor-related claims still accounted for 15% of incurred losses estimated so far this year.<\/li>\n<li>Healthcare, retail, and manufacturing remained the most targeted sectors, with manufacturing facing several ransomware incidents generating claims averaging over $1 million in severity, and healthcare experiencing extortion demands as high as $4 million.<\/li>\n<li>While 78% of Resilience clients over all time have avoided paying a ransom, threat groups such as Interlock, Chaos, Medusa, Akira, and Nightspire were the primary drivers of attacks on the Resilience portfolio in H1 2025.<\/li>\n<\/ul>\n<p>\u201cOur latest research highlights encouraging progress in our portfolio: a deep drop in overall claims and fewer disruptive vendor-related incidents,\u201d said Jeremy Gittler, Global Head of Claims at Resilience. \u201cWhile that\u2019s certainly good news, we can\u2019t let that distract from the increased attack intensity we\u2019re witnessing. It\u2019s that metric\u2014the dollars-and-cents of successful attacks\u2014that we must understand and leverage to better defend ourselves and build cyber resilience.\u201d<\/p>\n<p>Read the full report from Resilience: <strong><a href=\"https:\/\/unlock.cyberresilience.com\/2025midyear_risk_report_gated\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Midyear 2025 Cyber Risk Report<\/a><\/strong>.<\/p>\n<h4 class=\"smallhead\"><strong>About Resilience<\/strong><\/h4>\n<p>Resilience helps organizations become cyber resilient to material losses by staying ahead of bad actors. Founded by experts from across the highest tiers of the US military and intelligence communities \u2013 and built by prominent leaders and innovators from the cybersecurity, technology, and insurance industries \u2013 Resilience is the world\u2019s first cyber risk company that offers risk quantification software, cybersecurity experts, and highly rated insurance in integrated solutions purpose-built for large and middle-market organizations.<\/p>\n<p>Resilience is proud to be backed by leading technology investment firms, including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital. With headquarters in San Francisco, Resilience is globally dispersed, with teams in New York, Chicago, Los Angeles, Baltimore, Toronto, London, Milan, Madrid, Stockholm, Rotterdam and Dublin. Resilience offers insurance coverage through its licensed and appointed insurance agents and security services through its expert security team. The Resilience Solution is available through all broker partners to clients in the United States, the United Kingdom, Canada, and Europe. For more information, visit <a href=\"https:\/\/www.cyberresilience.com\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">www.cyberresilience.com<\/a>.<\/p>\n<p class=\"referencetext\"><em>SOURCE: Resilience<\/em><\/p>\n<p> Tags: <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-attacks\/\" rel=\"tag\">cyber attacks<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-risk\/\" rel=\"tag\">cyber risk<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-security\/\" rel=\"tag\">cyber security<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/insurtech\/\" rel=\"tag\">InsurTech<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/insurtech-spotlight\/\" rel=\"tag\">InsurTech Spotlight<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/resilience-insurtech\/\" rel=\"tag\">Resilience InsurTech<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI-powered phishing, double extortion tactics, and insurance policy theft fuel more destructive, costly ransomware attacks San Francisco, CA (Sept. 9, 2025) \u2013 The financial fallout of ransomware attacks is climbing even as the number&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[1],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts\/24095"}],"collection":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/comments?post=24095"}],"version-history":[{"count":0,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts\/24095\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/media?parent=24095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/categories?post=24095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/tags?post=24095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}