Ransomware attack cost up: Resilience

Cyber insurer Resilience reported Tuesday that the volume of incurred claims across its portfolio dropped by 53% but that the average cost of an individual ransomware attack rose by 17%.

Ransomware accounted for 91%, or almost all, of incurred losses in Resilience’s portfolio in the first six months of 2025, the report said.

Health care, retail and manufacturing remained the most targeted sectors. Manufacturing targets faced several ransomware incidents, generating claims averaging over $1 million in severity, and health care organizations saw extortion demands as high as $4 million.

Vendor-driven claims notifications fell from 37% to 26% of all claims and accounted for 15% of incurred losses estimated so far this year, down from 21% in 2024.

Increasingly sophisticated and profitable extortion tactics, including AI-powered social engineering, “are fueling a threat landscape where fewer attacks can still cause immense financial damage,” Resilience said.

In the Resilience portfolio, social engineering accounted for 57% of incurred claims and 60% of incurred losses in the first half of 2025.

“The 53% drop in claims doesn’t tell the whole story. Yes, we’re seeing fewer incidents escalate to incurred losses, but when they do hit, they’re hitting harder,” Jeremy Gittler, global head of claims at Resilience, said in the report.