2026 Midyear Cyber Risk Report

AI isn’t creating new attacks at scale. It’s making the oldest ones more effective. In the first half of 2026, more than 85% of Resilience’s incurred losses came from attacks exploiting human error — phishing, social engineering, transfer fraud. Two years ago, that number was 17.7%. AI’s financial impact is showing up in familiar methods, not novel ones.

Inside the Midyear Cyber Risk Report:

• Why human error now drives the vast majority of insured cyber loss
• How ransomware stays rare but costly, accounting for 73% of losses on just 5.8% of claims
• What separates organizations that contain attacks from those that pay for them