Market data · Cyber insurance premiums, rate trends, and claim costs
Cyber cover got cheaper. Claims did not get simple.
After three years of punishing rate increases, cyber insurance pricing turned in 2025 — and kept turning. Premiums fell while ransomware demands climbed, a combination that looks contradictory until you separate price from loss: carriers are charging less per dollar of cover, but the claims that do arrive, especially extortion claims, are bigger and messier than before.
Headline figures
Trend column: each figure is compared with its prior period from the same source, with the prior figure shown. Where no prior-period figure from the same source was available, the figure is labeled Baseline (October 2026) — trend tracking starts with the next refresh.
| Figure | Value | Source | Trend vs prior period |
|---|---|---|---|
| Initial ransomware demands, 2025 change | Up 47% year over year, to more than $1M | Coalition 2026 Cyber Claims Report, via Openkoda | ▲ Up 47% year over year (prior-year demand figure not stated on the page; add it at the next refresh) |
| Policyholders refusing to pay ransom, 2025 | Record 86% | Coalition, via Openkoda | Baseline (October 2026) — trend tracking starts with the next refresh |
| Dual-extortion share of ransomware claims; average cost | 70% of claims; ~$302,000 (about twice encryption-only) | Coalition, via Openkoda | Baseline (October 2026) — trend tracking starts with the next refresh |
| Closed claims resolved with no out-of-pocket loss | 64% | Coalition, via Openkoda | Baseline (October 2026) — trend tracking starts with the next refresh |
| U.S. cyber policies in force | 4.37M in 2023, roughly flat through 2024 | Openkoda compilation | ▬ Flat vs 2023: 4.37 million (roughly flat through 2024) |
| Global average data breach cost, 2025; U.S. average | $4.44M global; $10.22M U.S. | IBM Cost of a Data Breach Report 2025 | ▼ Global down vs 2024: $4.88 million; ▲ U.S. up vs 2024: $9.36 million (IBM Cost of a Data Breach Report 2024, fetched this session) |
The flat policy count is the figure that should worry the industry more than any rate index. Cheaper cover mostly meant existing buyers paying less, not new buyers arriving — so the protection gap is unchanged while the threat keeps professionalizing. For a buyer, the practical read is narrow: price is negotiable again, but underwriters still discount documented controls, and the claims data rewards fast reporting and refused ransoms more than any single product feature.
Methodology
Included: public rate and claims figures attributed to Marsh and Coalition in public compilations, plus IBM's 2025 breach-cost study. Excluded: carrier rate cards, broker quotes, and any Aon or Munich Re primary figure — none was verified this session. Marsh and Coalition figures are shown as attributed in the compilations that publish them, since the primary index and claims report pages were not fetched this session.
Disclaimer: Aggregated public estimates for information only, not investment or professional advice. Premiums vary by revenue, sector, controls, and limits.
Secure transfer via Afternic · Inquiries: info@primedomaincapital.com
Changelog
- October 2026: Initial edition — rates and premiums, claim losses, ransomware patterns, policy counts, and breach costs established; trend indicators added to every figure (prior-period figures shown where the same source publishes them; all other figures labeled Baseline (October 2026)).
- October 31, 2026: Marsh Q2 2026 global cyber rate (−4%) added. Existing Marsh/Coalition figures spot-checked and confirmed.