The Source for Cyber Insurance News, Insights and Data
VikingCloud surveyed large multi-location brands, which the report calls “distributed enterprises,” on how attacks spread and who pays. Headquarters makes the ransom call far more often than it mandates security. The survey did not ask whose cyber policy responds. When ransomware hits one location of a large brand, headquarters usually makes the ransom call. That … Read more
Ransomware leak sites listed 7,366 victims over the past year. That is 3% fewer than the year before. But… The data taken from those victims tells a different story. Among the 10 groups that leaked the most, combined exfiltration volume rose 275.8% to 896.2 terabytes. Several groups averaged more than a terabyte per victim. Those … Read more
ENISA published its 2026 Threat Landscape on 22 September. The press release leads with ransomware, geopolitics, and hacktivist DDoS campaigns against essential entities. Page 13 of the report says something else. ENISA reports that operators in high-criticality NIS sectors describe DDoS as “noise.” Anyone underwriting European cyber risk should start there. What The ENISA Threat … Read more
Two years ago, NetDiligence counted 15 ransom payments of $10m or more across its entire claims dataset. This year it counted 59. The sixteenth annual Cyber Claims Study, published on 15 September, analyses 10,309 real cyber insurance claims from incidents between 2021 and 2025, contributed directly by cyber insurers. Against the 2024 edition, which covered … Read more
Threat actors are using AI chatbots to negotiate ransoms. Travelers’ Director of Cyber Risk Services says they are not setting the price. They are removing the hours a victim needs to check backups and understand what happened. The pricing decision is still human. The clock is not. Matthew Butler, Director of Cyber Risk Services at … Read more