A cyber attack can stop a business trading, cost it customers and put it on the wrong side of the ICO. Cyber insurance exists to pay for the response and recovery when that happens, and in the UK roughly half of businesses now hold some form of it, although far fewer hold a policy written specifically for cyber.

In this article we have pulled together the latest statistics on cyber insurance from the sources that actually hold the data: the government’s Cyber Security Breaches Survey, the Association of British Insurers, the NCSC, the ICO, the big brokers’ market reports and the insurers’ own claims studies. UK figures come first in each section. Where a figure is global or US-only we say so, because a lot of the numbers that circulate online are American and get quoted as if they applied here.

The page is organised around the questions people ask us most: how many UK businesses are insured, what gets claimed and what it costs, what loss ratios look like, where premiums are heading, what happens with ransomware, and what actually happens when you make a claim.

Key cyber insurance statistics for 2026 at a glance

• 47% of UK businesses have some form of cyber insurance, but only 10% hold a specific cyber policy (Cyber Security Breaches Survey 2025/26, DSIT).
• UK insurers paid out £197 million in cyber claims in 2024, £138 million more than in 2023 (ABI, November 2025).
• Malware and ransomware accounted for 51% of UK cyber insurance claims in 2024, up from 32% in 2023 (ABI).
• Marsh’s UK clients notified 668 cyber claims in 2025, the highest number on record and 8% more than in 2024 (Marsh UK, 2026).
• Business email compromise and funds transfer fraud made up 58% of all Coalition cyber claims in 2025; ransomware was the costliest claim type at an average loss of about £202,000 (Coalition 2026 Cyber Claims Report, global).
• The US cyber insurance loss ratio rose to 53% in 2025, the first time it has passed 50% since the ransomware spike of 2020 to 2021 (AM Best, June 2026). No UK loss ratio is published.
• Global cyber insurance rates have fallen for twelve consecutive quarters and sit 27% below their mid-2022 peak (Marsh Global Insurance Market Index Q2 2026; Howden, January 2026).
• UK cyber rates fell 12% in Q4 2025 and 5% in Q2 2026 (Marsh UK insurance rates).
• 18% of UK ransomware victims paid the ransom in 2026, against 54% a year earlier (Sophos State of Ransomware in the UK, 2026 and 2025 editions).
• Organisations certified to Cyber Essentials are 92% less likely to make a cyber insurance claim (NCSC, 2024, based on the Cyber Essentials bundled insurer’s data).

1. How many UK businesses have cyber insurance?

The best source on UK take-up is the Cyber Security Breaches Survey, which DSIT runs every year with a sample of around 2,000 businesses and 1,000 charities. The 2025/26 edition was published on 30 April 2026.

• 47% of UK businesses and 35% of UK charities have some form of cyber insurance (CSBS 2025/26).
• Only 10% of businesses hold a policy written specifically for cyber; 37% have cyber cover as part of a wider business policy (CSBS 2025/26).
• Specific cyber policies by business size: 8% of micro businesses, 15% of small, 24% of medium and 32% of large businesses (CSBS 2025/26).
• 22% of businesses and 13% of charities do not know whether they have any cyber cover at all (CSBS 2025/26).
• Take-up has barely moved in three years: 43% of businesses had any cover in 2023/24, 45% in 2024/25 and 47% in 2025/26. DSIT describes the trend as broadly consistent (CSBS 2025/26).
• Among businesses without cover, 39% say they were not aware of cyber insurance, 34% say it is not a budget priority, 27% say leadership is not interested and 19% say it is too expensive (CSBS 2025/26).
• In a separate DSIT study of 104 SMEs with 10 to 249 staff, 65% had cyber insurance, 59% of those bought limits of up to £1 million, and 65% had to meet specific security requirements to qualify, with half of those spending between £5,000 and £25,000 to comply (DSIT, Insuring Resilience, 2025; small sample, treat as indicative).
• Under 3% of UK businesses hold dedicated standalone cyber insurance, according to Broker Insights research quoted by BIBA in January 2026. The gap between that figure and the survey’s 10% comes down to how “standalone” is defined.
• The UK has the highest cyber insurance penetration in Europe at 39%, compared with 29% in France, Spain and Germany and 22% in Italy (Howden, Rebooting Growth, September 2025, using YouGov survey data).
• Globally, around 80% of large corporates with revenue above $10 billion have cyber insurance, compared with around 10% of SMEs (Swiss Re Institute, November 2024).

Our view is that the 22% who do not know whether they are covered is the number to pay attention to. Cover sitting inside a wider policy usually carries a small sub-limit and a long list of exclusions, and the first time most of those businesses find that out is after an incident.

2. Cyber insurance claims statistics: how many, what causes them and what they cost

UK claims

• UK cyber insurers paid out £197 million in 2024 to help businesses recover from cyber incidents, £138 million more than in 2023, a rise of 230% (ABI, November 2025).
• 17% more cyber policies were taken out in 2024 than in the previous year (ABI).
• Malware and ransomware accounted for over half (51%) of UK cyber insurance claims in 2024, up from 32% in 2023 (ABI).
• Marsh UK recorded 668 cyber claim notifications from UK clients in 2025, up 8% on 2024 and the highest annual total to date, with the third and fourth quarters the busiest (Marsh UK Cyber Claims Trends 2025).
• Of Marsh UK clients’ 2024 claims, 28% were extortion including ransomware, 17% were data breaches and 7% were system infiltration (Marsh UK, May 2025).
• Ransomware was used in 70% of the extortion claims Marsh UK saw in 2021. By 2025 that had fallen to 24%, as attackers moved to data theft and extortion without encryption (Marsh UK, 2026).
• Ransomware featured in 52% of the UK cyber incidents handled by Pinsent Masons’ cyber team in 2025, up from 48% in 2024; data was lost or stolen in 59% of cases; supply chain compromise rose from 6% of incidents in 2024 to nearly 20% in 2025; and 83% of the organisations supported had cyber insurance (Pinsent Masons Cyber Annual Report 2026, also cited in Gallagher’s UK Cyber Market Report 2026).
• The largest UK ransom demand Gallagher cites for 2025 was about £5 million, down from £25 million the year before (Gallagher UK Cyber Market Report 2026).
• Manufacturing and retail were the most targeted UK sectors in 2025 (Gallagher UK Cyber Market Report 2026).

Global and European claims

• Business email compromise and funds transfer fraud together accounted for 58% of all Coalition claims in 2025. Funds transfer fraud alone was 27% of claims, and 71% of those started with social engineering (Coalition 2026 Cyber Claims Report, policyholders in the UK, US, Canada, Australia and Germany).
• Theft of funds was 25% of the claims CFC’s team resolved in 2025, and CFC says theft of funds notifications are now approaching half of all cyber claims (CFC, August 2026, global).
• Coalition’s average claim fell 19% in 2025 to roughly £87,000 (converted from $116,000). Business email compromise averaged about £20,000, funds transfer fraud about £106,000 and ransomware about £202,000, the costliest claim type (Coalition 2026 Cyber Claims Report).
• Ransomware was only 5.8% of Resilience’s claims by count in the first half of 2026 but 73% of incurred losses (Resilience Midyear Cyber Risk Report 2026).
• Ransomware made up around 60% of the value of large cyber claims (over €1 million) handled by Allianz Commercial in the first half of 2025, business interruption accounted for more than half of all cyber claim values, and 40% of large claim value involved data exfiltration, up from 25% in 2024 (Allianz Commercial, September 2025, global).
• Manufacturing accounts for 33% of Allianz’s large cyber claims by value since 2020, professional services 18% and retail 9% (Allianz Commercial, 2025).
• Across Chubb’s EMEA book, the average SME claim reached $82,621 in 2025, a five-year high, and SME claim frequency rose 86% in a year. Mid-market claims averaged $318,820 (Chubb EMEA Cyber Claims Report 2026).
• Email was the entry point in 52% of At-Bay’s 2025 claims and 82% of its financial fraud claims, but not a single At-Bay ransomware claim in 2025 started with email. 73% of ransomware claims came in through a VPN and 87% through a VPN or RDP (At-Bay InsurSec Report 2026, US-weighted).
• Large companies are 2% of the NetDiligence dataset but represent more than half of all incident costs; the average SME incident cost $230,000 in 2024 (NetDiligence Cyber Claims Study 2025, mostly North American).
• Coalition’s claims frequency rose 3% in 2025 after falling 7% in 2024, with business email compromise frequency up 15% (Coalition 2026).
• Travelers saw 57% more business email compromise claims in the first half of 2026 than in the first half of 2025, with no matching rise in ransomware claims (Travelers Q2 2026 Cyber Threat Report, US-weighted).

The most common cyber insurance claims, with examples

Across every claims report above, the same five claim types keep appearing. These are the ones we see in UK incident response work too.

1. Funds transfer fraud and business email compromise. A supplier’s mailbox is compromised, an invoice arrives with new bank details, and the finance team pays it. This is now the most frequent claim type on most insurers’ books (Coalition 58%, CFC 25% and rising). Average losses sit in the tens of thousands of pounds, but it is the claim type most often hit by sub-limits.
2. Ransomware and extortion. Less frequent than fraud, but the most expensive: around £202,000 per claim on Coalition’s book and 73% of losses on Resilience’s. The UK trend is towards data theft without encryption, which is why Marsh UK’s ransomware share of extortion claims fell from 70% to 24% in four years.
3. Data breach and privacy. 17% of Marsh UK’s 2024 claims and 73% of Marsh’s European notifications in 2025 had a privacy breach element. Costs come from forensics, notification, legal advice and regulatory response rather than from a single large payment.
4. Business interruption. Over half of cyber claim value at Allianz. UK policies now run indemnity periods of up to 365 days with waiting periods as short as eight hours (Gallagher UK 2026), which is where much of the real financial protection sits.
5. Supply chain and third-party incidents. Nearly 20% of UK incidents in 2025 according to Pinsent Masons, up from 6%. The retail and manufacturing attacks of 2025 were mostly uninsured, which Gallagher notes is one reason the UK market kept its capacity.

Suggested Read: Social Engineering Statistics

3. Cyber insurance loss ratios by year

A loss ratio is the share of premium an insurer pays out in claims. A 50% loss ratio means that for every £1 of premium collected, 50p went out in claims before expenses. Below about 60%, cyber is profitable for insurers; above it, rates start to rise. Loss ratios are the clearest signal of where premiums are heading, which is why brokers and underwriters watch them closely.

The only market that publishes cyber loss ratios in detail is the United States, through the statutory cyber supplement that insurers file each year. The UK has no equivalent, and the DSIT Insuring Resilience report notes that the industry itself has called for central publication of UK loss ratios. The figures below are therefore US figures, but the trend is what the London market responds to.

• The nine-year average US standalone cyber loss ratio to 2023 was 48% (Fitch Ratings, 2024).
• 2025 was the second consecutive annual increase and the first time the US loss ratio has exceeded 50% since the ransomware spike of 2020 to 2021 (AM Best, June 2026).
• Surplus lines insurers, which write almost two thirds of US cyber premium, ran a 55.9% loss ratio in 2025 against 50.2% for admitted carriers (AM Best, 2026).
• Third-party (liability) claims are trending up by about 30% across the US market (AM Best, 2026).
• Beazley, the largest London-listed cyber writer, reported a cyber claims ratio of 46.3% in 2025, up from 39.4% in 2024, and a combined ratio of 75.6%, up from 64.4% (Beazley plc full-year results, March 2026, global book).
• Globally, cyber combined ratios averaged 70% between 2022 and 2024 and the market made roughly $9 billion of underwriting profit over those three years (Howden, Rebooting Growth, September 2025).
• Beazley’s own assessment in March 2026 was that “much of the US cyber market is operating at unprofitable levels” and that “softening rating conditions are not an indication that cyber threats are relenting”.

Have a think about what this means for UK buyers: three years of underwriting profit paid for the rate cuts of 2024 and 2025. A loss ratio above 50% in the biggest market is the first sign that the cuts are slowing, which is exactly what the Q2 2026 UK rate data shows.

4. The UK cyber insurance market: premiums, rates and market size

Rates

• UK cyber insurance rates fell in every quarter from Q4 2024 to Q2 2026: 6% (Q4 2024), 8% (Q1 2025), 11% (Q2 2025), 11% (Q3 2025), 12% (Q4 2025), 8% (Q1 2026) and 5% (Q2 2026) (Marsh UK insurance rates, quarterly).
• 78% of Marsh’s UK cyber clients received a rate reduction in Q1 2025 and 26% bought more limit with the saving (Marsh UK, Q1 2025).
• Marsh described Q2 2026 as the quarter in which “the level of decreases has moderated compared to prior quarters”, with most insurers still asking for “demonstrable cyber resilience, governance, tested incident response” and board involvement (Marsh UK, Q2 2026).
• Globally, Marsh’s index recorded cyber rate falls of 6% to 7% in every quarter of 2024 and 2025, then 5% in Q1 2026 and 4% in Q2 2026, the twelfth consecutive quarterly decline (Marsh Global Insurance Market Index).
• Howden’s global cyber pricing index was 27% below its mid-2022 peak at the end of 2025, but still 103% above pre-2020 levels (Howden, January 2026 and September 2025).
• International cyber rates have fallen 24.5% since the start of 2024 against 9.7% in the US (Howden Re, September 2026).
• Premiums across Lockton’s cyber portfolio fell by an average of 11% in 2025, and insurers told Lockton that rates were “near the lower end of what is sustainable” (Lockton, February 2026).
• The number of insurers writing cyber in the London market rose from about 25 in 2020 to 45 in 2025 (Lockton, 2026).
• Beazley’s cyber rates fell 5.8% in 2025 after a 5.5% fall in 2024, and its cyber premium fell 8.8% to $1.16 billion (Beazley plc, March 2026).
• UK insurers are “loosening underwriting requirements, especially for SMEs with turnovers below £50 million” and have cut the number of proposal-form questions (Gallagher UK Cyber Market Report 2026).

Market size

• The global cyber insurance market was worth about $15.3 billion in 2024, under 1% of global property and casualty premium, and Munich Re expected it to reach $16.3 billion in 2025 and to more than double by 2030 (Munich Re, Cyber Insurance Risks and Trends 2025).
• Swiss Re put the 2025 global market at $15.6 billion and cut its growth forecast to 5% a year, because “rate deterioration for the third straight year is neutralising the organic exposure growth” (Swiss Re Institute, September 2025).
• North America is about two thirds of the global market and Europe about 21%, or $3.3 billion in 2024 (Munich Re; Swiss Re).
• Global cyber premium growth has slowed to about 6% a year, from around 40% a year during the 2020 to 2022 hard market (Howden, January 2026).
• Standalone cyber premium written in the London company market (excluding Lloyd’s) was £1.113 billion in 2024, down from £1.234 billion in 2023 but more than four times the £253 million written in 2019. 44% of it came from UK and Irish clients (IUA London Company Market Statistics Report 2025).
• US cyber premium was $7.5 billion in 2025, up from $7.1 billion, although AM Best attributes most of the rise to business moving onshore rather than real growth (AM Best, June 2026).

What UK businesses pay

There is no official survey of UK cyber insurance premiums. The figures below are what brokers and insurers publish about their own books, and they are indications rather than benchmarks.

• UK SMEs with 10 to 249 staff that buy limits of up to £1 million reported a median annual premium of £11,500, rising to £55,000 for broader cover including business interruption, extortion and crisis management (DSIT, Insuring Resilience, 2025; 104 respondents, indicative only).
• 36% of uninsured UK SMEs say cost is prohibitive, 31% say broker advice was unclear or limited, and 28% do not think cover is necessary (DSIT, Insuring Resilience, 2025).
• Organisations certified to Cyber Essentials with turnover under £20 million receive £25,000 of cyber liability cover at no extra cost, and can top up to £100,000 for £305.76 a year or £250,000 for £546.56 (IASME, 2026).

We have written a separate guide on what cyber insurance costs in the UK and what moves the quote, which goes into the broker and insurer price indications in detail.

5. Ransomware and data breaches: what gets claimed and what gets paid

Ransomware in the UK

• Ransomware affected 1% of UK businesses in the last 12 months, down from 3% in each of the two previous years (CSBS 2025/26). That is a figure for all businesses including the very smallest; insurer datasets, which count insured claimants, show a much higher share.
• The ICO received 617 ransomware breach reports in 2025, down from 752 in 2024 and 1,253 in 2023 (our count of the ICO data security incident trends dataset, Q1 2019 to Q4 2025).
• UK organisations made 323 ransomware reports to Report Fraud between April 2025 and March 2026, more than half of them from SMEs, with reported losses of around £270,000, a 50% rise on the previous year. The police say the figures are heavily under-reported (City of London Police, June 2026).
• The NCSC handled 429 incidents between September 2024 and August 2025, of which 204 were nationally significant, more than double the 89 of the previous year, and 18 were highly significant (NCSC Annual Review 2025).
• The median ransom demand against UK organisations was $2.5 million in 2026 and 65% of demands were for $1 million or more (Sophos State of Ransomware in the UK 2026, 120 respondents).
• 18% of UK ransomware victims paid the ransom and got their data back in 2026, against 54% in 2025. The 2025 median demand was $5.37 million. Both samples are small, so treat the two years as a pair of readings rather than a trend (Sophos UK, 2026 and 2025).
• The average UK recovery cost from a ransomware attack, excluding any ransom, was $1.49 million in 2026, and 55% of victims were back up within a week (Sophos UK 2026).
• Home Office modelling for the ransomware payment ban assumes a UK payment rate of between 11% and 33%, with a central estimate of 22% (Home Office options assessment, 2025).

Ransomware and insurers

• 86% of Coalition policyholders hit by ransomware in 2025 refused to pay, a record, and in the UK every Coalition ransomware client was restored without paying (Coalition 2026 Cyber Claims Report).
• Initial ransom demands against Coalition policyholders rose 47% in 2025 to an average of over $1 million, and 70% of ransomware events involved both encryption and data theft (Coalition 2026).
• 32% of ransom demands against At-Bay policyholders were paid in 2025; the average demand was $980,000 and the average payment $370,000 (At-Bay 2026, US-weighted).
• Where ransoms are paid, insurers fund about 23% of the payment and the victim organisation about 40%, with the rest from other sources (Sophos State of Ransomware 2024, 14 countries).
• Only 1% of organisations that made a cyber insurance claim said their insurer funded 100% of the remediation costs; the most common reason was that the total bill exceeded the policy limit (Sophos Cyber Insurance and Cyber Defenses 2024, 5,000 respondents).
• 64% of Coalition’s closed claims in 2025 resulted in no out-of-pocket loss for the policyholder, and Coalition recovered $21.8 million of stolen funds for clients, an average of about $202,000 per recovery (Coalition 2026).

Data breaches in the UK

• 43% of UK businesses and 28% of charities identified a cyber breach or attack in the last 12 months; phishing was the most common type, affecting 38% of businesses (CSBS 2025/26).
• The median cost of the most disruptive breach was £0 for UK businesses, with a 95th percentile of £4,000 across all businesses and £10,000 for medium and large ones. Most incidents cost nothing; the small minority with a material outcome cost a great deal more, which is the gap insurance exists to cover (CSBS 2025/26).
• Organisations reported 13,457 personal data breaches to the ICO in 2025, up from 12,194 in 2024, of which 3,153 were cyber incidents. Unauthorised access (1,597) and phishing (1,526) were the leading cyber causes, and retail and manufacturing (805) was the sector reporting most cyber breaches (our count of the ICO dataset).
• 15% of cyber breach reports to the ICO in 2025 arrived more than a week after the incident, against the 72-hour UK GDPR deadline (our count of the ICO dataset).
• UK organisations took an average of 148 days to identify and 42 days to contain a breach when using AI and automation extensively, against 168 and 64 days without; supply chain compromise was the most common UK attack vector at 18% (IBM Cost of a Data Breach Report 2025, UK sample).
• 38% of small UK businesses reported a successful hack in the past 12 months, the highest of any country surveyed, against 29% globally, and firms lose an average of 32 hours of downtime per hack (Hiscox Cyber Readiness Report 2026).

Suggested Read: Phishing Statistics

6. Cyber Essentials and cyber insurance

Cyber Essentials is the government-backed baseline certification, and it is the one scheme that comes with insurance attached. It is also the first thing most UK underwriters ask about.

• Organisations certified to Cyber Essentials are 92% less likely to make a cyber insurance claim, according to data from the insurer that provides the scheme’s bundled cover (NCSC, November 2024, repeated in the NCSC Annual Review 2025).
• The earlier reading of the same data, from 2022 claims, was 80% fewer claims (NCSC Annual Review 2023, cited in DSIT’s Cyber Essentials impact evaluation, October 2024).
• 39,790 Cyber Essentials and 12,850 Cyber Essentials Plus certificates were issued in the year to August 2025, both up about 17% (NCSC Annual Review 2025).
• Certified organisations domiciled in the UK or Crown Dependencies with turnover under £20 million can opt in to £25,000 of cyber liability insurance underwritten by AIG, with a £1,000 excess. It covers liability, event management, extortion, regulatory investigation and business interruption, and excludes money stolen by cyber fraud (IASME).
• Users of the Cyber Essentials scheme rated the bundled insurance 6.6 out of 10 (DSIT Cyber Essentials impact evaluation, 2024).
• Since 31 March 2023 every standalone cyber policy written at Lloyd’s has had to exclude losses from state-backed cyber attacks that significantly impair a state’s ability to function (Lloyd’s Market Bulletin Y5381).

The 92% figure comes from one insurer’s book and has no published methodology, so we would not build a business case on it alone. What it does show is that the five Cyber Essentials controls remove the entry routes behind most SME claims, which matches what the At-Bay data says about VPNs and RDP.

Suggested Read: Cyber Essentials Benefits

7. What actually happens when you make a cyber insurance claim

This is the part of the subject that none of the statistics pages cover, and it is the one that matters most on the day.

• Notification. Policies require notice as soon as you become aware of an incident, and most have a 24-hour hotline. Late notification is one of the commonest reasons claims are disputed. Note that in 2025, 15% of cyber breach reports reached the ICO more than a week after the incident; the insurer usually hears later still.
• Investigation. The insurer appoints a panel incident response firm and a breach lawyer, normally within hours. The forensic investigation establishes how the attacker got in, what they touched and whether data left the network. In our experience the finding that decides the claim is often not the attack itself but whether the controls declared on the proposal form were actually in place.
• What gets paid. First-party costs (forensics, restoration, business interruption, extortion handling, notification) and third-party costs (legal defence, regulatory response, claims from customers). Coalition closed 64% of its 2025 claims with no out-of-pocket loss to the policyholder.
• What gets declined or reduced. Sub-limits on funds transfer fraud and social engineering, which is now the most common claim type; waiting periods on business interruption; exclusions for unsupported software and for state-backed attacks; and misrepresentation. Under the Insurance Act 2015 the insured owes a duty of fair presentation, and a careless “yes” to “is MFA enforced on all remote access” when one contractor VPN has none can reduce the payout in proportion or void the policy.
• The evidence underwriters ask for at renewal. A current Cyber Essentials Plus certificate and a recent penetration test report with the criticals closed are the two documents that answer most of the questions on a UK proposal form. We issue both, as an IASME certification body and a CREST member, and the gap between what a client has declared and what the test finds is the single most useful thing to fix before a renewal.

Suggested Read: Cyber Security Incident Response Plan

Frequently asked questions

What percentage of UK businesses have cyber insurance? 47% have some form of cyber cover, but only 10% hold a policy written specifically for cyber. The rest rely on cover bundled into a wider business policy, usually with a small sub-limit (Cyber Security Breaches Survey 2025/26).

What is the average cyber insurance claim? It depends on the claim type and the insurer’s book. Coalition’s 2025 average across all claim types was about £87,000; business email compromise averaged about £20,000 and ransomware about £202,000. Chubb’s EMEA SME average was $82,621. UK insurers as a whole paid out £197 million in 2024 (ABI).

What is a cyber insurance loss ratio? The share of premium paid out in claims. The US cyber loss ratio was 53% in 2025, the first time it has passed 50% since 2021 (AM Best). No UK loss ratio is published, but Beazley’s global cyber claims ratio was 46.3% in 2025.

What are the most common cyber insurance claims? Funds transfer fraud and business email compromise by frequency (58% of Coalition’s 2025 claims), ransomware by cost (73% of Resilience’s 2026 losses). In the UK, malware and ransomware made up 51% of 2024 claims (ABI).

Does cyber insurance cover ransomware? Most standalone UK policies include extortion cover, but payment is never automatic: it is unlawful if the recipient is sanctioned, the government has confirmed a payment ban for the public sector and critical infrastructure, and in 2025 every Coalition ransomware client in the UK was restored without paying. Insurers funded about 23% of ransom payments where one was made (Sophos 2024).

Are cyber insurance premiums going up or down in the UK? Down, but more slowly. UK rates fell 12% in Q4 2025 and 5% in Q2 2026 (Marsh UK). With US loss ratios now above 50%, brokers expect the falls to level off through 2026.

About this data

This page draws on reports published between April 2025 and September 2026. The UK adoption and breach figures are from the DSIT Cyber Security Breaches Survey 2025/26 (fieldwork autumn 2025, published 30 April 2026). Claims figures come from the ABI, Marsh UK, Pinsent Masons, Gallagher, Coalition, CFC, Allianz Commercial, Chubb, At-Bay, Resilience, NetDiligence and Travelers; where a report covers several countries we have said so. Loss ratios are from Fitch Ratings, AM Best and Beazley’s audited results. Rate data is from Marsh’s quarterly indices, Howden, Lockton and Gallagher. ICO figures are our own count of unique incident references in the ICO’s published data security incident trends dataset. Coalition’s sterling figures are its own conversions from US dollars at the rate it states in the report.

Older figures from 2015 to 2022 that appeared in previous versions of this page have been removed. We refresh this page after each Cyber Security Breaches Survey and each ABI claims release.

Sources

Every figure on this page is taken from the publisher’s own report or dataset. If you cite a statistic from this page, please link to the original source as well as to us.

• DSIT, Cyber Security Breaches Survey 2025/26 (30 April 2026)
• DSIT, Insuring Resilience: Adoption of cyber insurance by UK SMEs (2025)
• DSIT, Cyber Essentials impact evaluation (October 2024)
• ABI, Nearly £200 million paid in cyber claims to help UK businesses recover (10 November 2025)
• BIBA, cyber insurance brokers directory (14 January 2026)
• NCSC Annual Review 2025
• NCSC, A decade of Cyber Essentials (15 November 2024)
• ICO, Data security incident trends dataset (Q1 2019 to Q4 2025)
• City of London Police, ransomware warning to organisations (29 June 2026)
• Home Office, ransomware proposals options assessment (2025)
• IASME, Cyber Essentials cyber liability insurance
• Lloyd’s Market Bulletin Y5381, state-backed cyber-attack exclusions
• Marsh UK, Cyber claims trends 2025
• Marsh UK, UK cyber insurance claims 2024 (7 May 2025)
• Marsh UK insurance rates (quarterly)
• Marsh Global Insurance Market Index, Q2 2026 (23 July 2026)
• Marsh Global Insurance Market Index, Q1 2026 (22 April 2026)
• Pinsent Masons, Cyber Annual Report 2026
• Gallagher, UK Cyber Market Report 2026
• Howden, Cyber insurance: Rebooting growth (September 2025)
• Howden, Re-balancing: 1.1.26 market report (January 2026)
• Howden Re, Cyber outlook H2 2026 (5 September 2026)
• Lockton, Cyber insurance market update (5 February 2026)
• Beazley plc, Results for the year ended 31 December 2025 (4 March 2026)
• AM Best, US cyber market segment report (26 June 2026)
• Fitch Ratings, US cyber insurance growth raises underwriting risk (15 April 2026)
• Munich Re, Cyber insurance: Risks and trends 2025 (3 April 2025)
• Swiss Re Institute, Reality check on the future of the cyber insurance market (November 2024)
• IUA, London Company Market Statistics Report 2025
• Coalition, 2026 Cyber Claims Report
• CFC, Theft of funds: the most common cyber claim today (27 August 2026)
• Allianz Commercial, Cyber risk trends 2025 (24 September 2025)
• Chubb, EMEA Cyber Claims Report 2026
• At-Bay, 2026 InsurSec Report (April 2026)
• Resilience, 2026 Midyear Cyber Risk Report (July 2026)
• NetDiligence, Cyber Claims Study 2025 (September 2025)
• Travelers, Q2 2026 Cyber Threat Report
• Sophos, The State of Ransomware in the UK 2026
• Sophos, The State of Ransomware 2025: UK
• Sophos, The State of Ransomware 2024 (April 2024)
• Sophos, Cyber Insurance and Cyber Defenses 2024 (June 2024)
• Hiscox, Cyber Readiness Report 2026 (September 2026)
• IBM, Cost of a Data Breach Report 2025: UK findings (30 July 2025)
• Insurance Act 2015, section 3: the duty of fair presentation