2025 Midyear Cyber Risk Report

A drop in cyber claims volume doesn’t mean risk is shrinking—it means threat actors are trading spray-and-pray tactics for high-precision, high-severity attacks. Resilience analyzed portfolio claims data to reveal where modern cyber losses actually originate and how organizations can strengthen their defenses against evolving systemic threats.

What you’ll find inside:

• Attackers Working Smarter: Average ransomware claims rose to $1.18M in H1 2025, with groups like Interlock (37% of loss severity) and Chaos (23%) driving major financial impact.
• AI & Social Engineering Entry: Phishing and browser attacks drive 38% of incurred claims and 42% of ransomware entry, using fake updates and stolen credentials to bypass perimeter security.
• Compounding Ecosystem Risk: Vendor incidents account for 37% of claims notices and 52% of point-of-failure losses, requiring continuous governance over point-in-time snapshots.