The Source for Cyber Insurance News, Insights and Data
Ransomware leak sites listed 7,366 victims over the past year. That is 3% fewer than the year before. But… The data taken from those victims tells a different story. Among the 10 groups that leaked the most, combined exfiltration volume rose 275.8% to 896.2 terabytes. Several groups averaged more than a terabyte per victim. Those … Read more
ENISA published its 2026 Threat Landscape on 22 September. The press release leads with ransomware, geopolitics, and hacktivist DDoS campaigns against essential entities. Page 13 of the report says something else. ENISA reports that operators in high-criticality NIS sectors describe DDoS as “noise.” Anyone underwriting European cyber risk should start there. What The ENISA Threat … Read more
Two years ago, NetDiligence counted 15 ransom payments of $10m or more across its entire claims dataset. This year it counted 59. The sixteenth annual Cyber Claims Study, published on 15 September, analyses 10,309 real cyber insurance claims from incidents between 2021 and 2025, contributed directly by cyber insurers. Against the 2024 edition, which covered … Read more
Threat actors are using AI chatbots to negotiate ransoms. Travelers’ Director of Cyber Risk Services says they are not setting the price. They are removing the hours a victim needs to check backups and understand what happened. The pricing decision is still human. The clock is not. Matthew Butler, Director of Cyber Risk Services at … Read more
In late June, an energy utility in Australia lost its firewall. The attacker did not want that. Neither did his tool. A suspected ransomware operator had pointed Claude Code at the device. The model tried to rewrite the VPN configuration through the API. Those calls failed. So it downloaded the full device configuration, edited it … Read more