Cyber Insurance Statistics 2026

Axis Intelligence Research  ·  Marcus Chen  ·  June 28, 2026  ·  CC BY 4.0
CIPG™ 2026
$15.3B
Global cyber insurance market 2024 · less than 1% of total P&C premiums · Munich Re 2025
CIPG™ 2.17×
Cyber Insurance Protection Gap Index · FBI IC3 US losses vs global insured payouts · Axis Intelligence Research original
~50,000
US cyber claims filed 2024 · +40% YoY · while premiums fell 7.1% — first-ever decline · NAIC 2025
86%
Businesses refusing to pay ransomware demands in 2025 · record high · Coalition 2026 Cyber Claims Report
$10.22M
Average US data breach cost 2025 · all-time high · +9% YoY · IBM Cost of a Data Breach Report 2025
~47%
Global cyber insurance adoption rate · 9 in 10 C-suite feel unprotected · Munich Re Global Cyber Survey 2026
⚠
The 2024 Paradox: US cyber insurance premiums fell 7.1% to $9.14B — the first decline ever recorded — while claims surged 40% to nearly 50,000. That combination produced the CIPG™ of 2.17×: FBI-reported US cybercrime losses alone ($16.6B) equaled 2.17× total global insured cyber payouts (~$7.65B). S&P Global Ratings forecasts premiums will reverse course with a +15–20% increase in 2026.
Axis Intelligence Research — Cyber Insurance Protection Gap Index (CIPG™)
2.17× — FBI US losses vs global claims paid
Original finding: FBI IC3 US cybercrime losses ($16.6B) equal 2.17× estimated global cyber insurance payouts (~$7.65B). This ratio is a floor — it excludes unreported incidents and non-US losses. Munich Re: "less than 5%, possibly as little as 1%, of cyber risks are currently insured."
FBI IC3 US losses 2024 — $16.6B (+33% YoY)
$16.6B
Global cyber premiums 2024 — $15.3B (Munich Re)
$15.3B
Estimated global claims paid (~50% loss ratio)
~$7.65B
US DWP as share of global premiums — 59.7%
$9.14B

CIPG™ Methodology: Axis Intelligence Research original. CIPG™ = FBI IC3 US losses ÷ (global cyber premiums × ~50% loss ratio) = $16.6B ÷ $7.65B = 2.17×. Inputs: FBI IC3 2024 Annual Report (April 2025); Munich Re Cyber Insurance Risks & Trends 2025; NAIC 2025 Cybersecurity Insurance Report (US loss ratio ~47%). Conservative floor — excludes unreported losses (FBI estimates only 20–30% of cybercrime is reported) and non-US losses. Protection gap is almost certainly wider.  ·  No existing publication calculates this composite. Axis Intelligence Research original.  ·  CC BY 4.0  ·  axis-intelligence.com

Global Cyber Insurance Market 2017–2030 (USD Billions)
Munich Re Cyber Insurance Risks & Trends 2025: $15.3B global 2024; 10%+ CAGR to $28B by 2030. Swiss Re: ~$15.6B in 2025. NAIC 2025: US DWP $9.14B (down 7.1% from $9.84B in 2023 — first-ever decline). Global growth 2017–2022: 30%+ CAGR (Swiss Re). 2022–2025: ~5% CAGR driven by market softening. Note: 2023 NAIC-derived global figure uses 59% US-share methodology; Munich Re 2024 figure uses standalone policy scope.
US Cyber Insurance Premium Rate Changes 2019–2026 (%)
Marsh Global Insurance Market Index (2019–2025 actuals); S&P Global Ratings (2026 forecast). Peak hard market: +74% in 2021 (Colonial Pipeline; Kaseya REvil). Cumulative decline from 2022 peak: 22–27% by end 2025. Beazley H1 2025 investor disclosures: -6.8% cyber-specific rate change. S&P forecast: +15–20% in 2026 — driven by rising claim severity, 40% claims frequency jump, and AI-powered attack cost escalation. Rate cycle now reversing.
Claims by Type: Volume vs Average Loss 2025 (Coalition)
Coalition 2026 Cyber Claims Report (March 2026): data from 100,000+ policyholders across US, Canada, UK, Australia, Germany. BEC = most frequent (31% of incidents; avg loss $27K). Ransomware = most expensive (21% of incidents; avg loss $269K). FTF = 27%; avg loss $141K. BEC and FTF combined = 58% of all incidents. Dual-extortion ransomware (encrypt + steal) = 70% of ransomware cases; 2× more expensive than encryption-only. Initial ransom demands +47% YoY; 86% of businesses refused to pay.
US Cyber Claims Filed vs US Direct Written Premiums 2019–2024
NAIC 2025 Cybersecurity Insurance Report (primary source): US DWP fell to $9.14B in 2024 — first-ever decline (-7.1% from $9.84B in 2023). Claims surged to ~50,000 (+40% from 33,561 in 2023). 74% of claims closed without payment (>20-to-1 ratio closed-without-payment vs paid). US loss ratio ~47% (Fitch Ratings 2024 — third consecutive year of strong profitability). This premium-fell/claims-rose paradox is what drives S&P's 15–20% 2026 forecast.
Cyber Insurance Adoption Rate by Organization Size 2025 (%)
Large enterprises (>$1B revenue)60–70%
Near-saturation in healthcare (82%) and financial services; American Academy of Actuaries Feb 2026
Mid-market ($100M–$1B revenue)40–50%
Significant gap vs enterprise; net-new cost + lack of understanding of coverage scope
SMB ($10M–$100M revenue)17–23%
SMBs filed 64% of all 2024 claims (Coalition); avg severity $79K; most need coverage, fewest have it
Micro-business (<$10M revenue)5–10%
Frequently uninsurable: 51% have no cybersecurity measures; Swiss Re / Munich Re 2025
Asia-Pacific (all eligible businesses)<5%
vs 35% penetration in US; largest untapped global market; Swiss Re / Munich Re
Global average (all eligible organizations)~47%
More than half of eligible organizations globally still uninsured · Munich Re Global Cyber Survey 2026
American Academy of Actuaries, Cyber Insurance Nears an Inflection Point (February 2026); Munich Re Global Cyber Risk and Insurance Survey 2026 (9,500+ respondents, 20 countries); Swiss Re; Coalition 2026 Cyber Claims Report.
Average Data Breach Cost by Industry 2025 (USD Millions)
IBM Cost of a Data Breach Report 2025 (20th annual edition; Ponemon Institute; 600 organizations across 17 industries and 16 countries; March 2024–February 2025 period). Global average: $4.44M (down 9% from $4.88M in 2024 — first decline in 5 years). US average: $10.22M (all-time high, +9% YoY; SEC disclosure mandates + state notification laws drive US premium). Healthcare leads for 14th consecutive year at $7.42M. Shadow AI added $670K to average breach cost where present.
FBI IC3 Reported Cybercrime Losses 2020–2024 (USD Billions)
FBI IC3 2024 Annual Report (published April 2025 — official US government data from ic3.gov). Total 2024: $16.6B (+33% from $12.5B in 2023). Top categories: investment/crypto fraud $6.5B; BEC $2.77B; ransomware losses formally reported $12M+ (but drastically undercounted — many orgs don't file IC3 reports). 859,532 complaints; 83% of losses from cyber-enabled fraud. FBI note: only ~20–30% of cybercrime is estimated to be reported. CIPG™ denominator uses this figure as the US loss baseline.
8 Controls Insurers Now Require to Write a Policy (2026)
MFA
Multi-Factor Authentication on ALL systems. 99% of applications include MFA questions. Absence = policy denial at most carriers (Marsh).
EDR
Endpoint Detection & Response. VPNs = 59% of ransomware entry points confirmed by forensics (Coalition 2026).
Backups
Immutable, offline, tested. 72% of ransomware attacks specifically targeted backups before encrypting. Required for coverage.
PAM
Privileged Access Management. BEC losses = $2.77B in 2024 (FBI IC3); credential abuse the primary enabler.
IRP
Incident Response Plan, documented & tested. Early detection = up to 1,000× lower ransomware cost (Allianz Commercial).
VM
Vulnerability Management with patch cadence. Edge device exploitation: 3% → 22% of breach vectors in one year (Verizon 2025 DBIR).
Email
DMARC enforcement + advanced filtering. Phishing = #1 initial attack vector in IBM 2025 (16% of breaches; $4.8M avg cost).
SAT
Security Awareness Training + phishing simulations. Absence = MFA discount denied (-18–22% for MFA compliance; Coalition).
Controls per Marsh Global Insurance Market Index 2026; Coalition 2026 Cyber Claims Report; Allianz Commercial 2025 cyber risk update; Verizon 2025 DBIR; IBM Cost of a Data Breach Report 2025; FBI IC3 2024 Annual Report.
Ransomware Claims Economics 2021–2025: Demands, Refusals & Avg Losses
Coalition 2026 Cyber Claims Report (March 2026): initial ransom demands +47% in 2025; record 86% refusal rate; average ransomware claim loss $269,000 (Coalition) / $292,000 (Deepstrike). Dual-extortion (encrypt + exfiltrate) = 70% of ransomware cases; 2× more expensive than encryption-only. FBI IC3 2024: ransomware complaints +9% to 3,156 reported (vast undercount — most report to field offices or not at all). Aon: average ransom payment fell 77% in 2024 despite higher demands, reflecting improved negotiation and backup capabilities. Coalition recovered $21.8M in stolen funds for policyholders in 2025 (avg $202K/recovery).
Cyber Insurance Market — Key Milestones 2017–2026
Sources: NAIC Cybersecurity Insurance Reports 2020–2025; Munich Re Cyber Insurance Risks & Trends 2025 and 2026; FBI IC3 Annual Reports 2022–2024; Coalition 2026 Cyber Claims Report; IBM Cost of a Data Breach Report 2025; American Academy of Actuaries (February 2026); S&P Global Ratings (2026 Cyber Insurance Market Outlook); Lloyd's Market Association (war exclusion updates).