In July 2024, a faulty update from cybersecurity provider CrowdStrike triggered widespread disruptions across millions of Windows systems globally. Although this wasn’t a malicious attack, its repercussions led to one of the largest IT outages recorded, affecting crucial operations in key industries. The aviation sector, banks, stock exchanges, technology firms, and healthcare services faced significant disruptions, underscoring the fragility of our cyber infrastructure.
One significant takeaway from this event is the reminder of our digital vulnerabilities. The modern cyber landscape faces pressure from various stressors, including intricate supply chain dependencies, geopolitical conflicts, and a rise in sophisticated cyber actors. Together, these factors can substantially impact economies and societies.
According to Munich Re, the global cyber insurance market is expected to reach USD 16.3 billion by 2025. This sector has proven effective in protecting organizations—ranging from small businesses to large enterprises—against risks that threaten their digital assets. The ability of the insurance market to endure various extreme cyber scenarios is commendable; it can handle widespread malware attacks or significant outages from cloud service providers. While rapid shifts in technology and geopolitical factors present challenges, they also offer unique opportunities for insurers.
Stefan Golling, a member of the Board of Management responsible for Global Clients and North America, emphasized the importance of strengthening digital defenses. He stated, “In today’s technology-dependent world, organizations can only be successful if they strengthen their digital defenses with robust, multi-layered risk management. Cyber insurance is an effective component in this approach.”
This report provides a comprehensive outlook on the cyber risk landscape, exploring the dynamics affecting both cyber insurance and market demand.
Cyber Risk Landscape – Major Loss Drivers
The cyber risk landscape has seen a pronounced increase in both the scale and impact of cyber incidents. Notably, four types of attacks account for the majority of losses: ransomware, phishing, business email compromise (BEC), and advanced persistent threats (APTs).
Data from Munich Re and Mandiant Cyber Underwriting’s Threat Intelligence indicates that certain sectors—government, manufacturing, and technology—are particularly vulnerable to cyber-attacks. The following ranking reveals the sectors most impacted by financially motivated threat actors, hacktivists, and state-sponsored actors.
Regardless of the industry, size, or location, the analysis indicates that no organization is immune to cyber threats. A global survey by Munich Re revealed that 87% of C-level respondents believe their organization’s protection is inadequate. Notably, micro and small businesses are often prime targets, not due to being specifically targeted, but because opportunistic attackers take advantage of inadequate cybersecurity, selecting “low-hanging fruits.”
Ransomware Attacks: High in Profile and Scale
Ransomware continues to be a dominant threat, with an alarming trend towards Cybercrime-as-a-Service. This includes platforms offering subscription-based malware and AI-powered hacking tools. These developments reduce the entry barriers for criminal enterprises, likely resulting in an uptick in the frequency, automation, and sophistication of ransomware attacks. AI advancements will enable attackers to operate at an unprecedented scale and accuracy.
Facts and Figures
- In 2024, ransomware attacks rose significantly, with only 15% being publicly disclosed. Data exfiltration incidents nearly doubled.
- 33 new threat actors emerged, contributing to over 5,000 leak site posts across 75 active groups, despite efforts by law enforcement to disrupt operations.
- Major attacks in 2024 included AlphV, which disrupted Change Healthcare’s operations, affecting hundreds of healthcare applications and leading to financial losses estimated at USD 2.4 billion.
- A Fortune 50 company reportedly paid a ransom of USD 75 million to the Dark Angels ransomware gang, marking one of the largest ransoms on record.
Munich Re’s data indicates that ransomware remains the leading driver of cyber insurance losses. The manufacturing and healthcare sectors top the list for ransomware claims. Business interruption (BI) stemming from cyber incidents represents 51% of total costs, reflecting an alarming increase across all industries.
Online Scam: Fraud from Within
Business Email Compromise (BEC) and Business Communication Compromise (BCC) scams continue to pose significant risks. These attacks involve deceiving individuals in organizations to obtain money or sensitive information by impersonating trusted parties. Attackers use various channels, including emails, phone calls, and messaging apps, making it easy for them to bypass corporate security controls.
Facts and Figures
- 2024 saw a surge in incidents, following a 9% increase in global losses in 2023. Email remains the primary threat vector, heightened by GenAI-powered attacks.
- Estimates suggest around 500,000 individuals work in agile networks as scammers, predominantly from fraud factories in Southeast Asia.
- AI tools have made BEC scams even more dangerous, enabling highly targeted social engineering attacks.
Data Breach: Logins for Sale
Data breaches remain alarmingly high, with the average cost surging by 10% to USD 4.88 million. In particular, lawsuits following incidents have become increasingly common in the U.S., where sensitivity around data breaches has led to large class action settlements.
Personal identifiable information (PII) and login credentials typically find their way onto dark web forums, paving the way for further cyber incidents and fraudulent activities.
Facts and Figures
- Exploitation of data leaks has increased eightfold, compromising around 5.5 billion accounts.
- “Mega-hacks” like the Change Healthcare incident highlight that all businesses, regardless of size, face risks.
- Data breaches often involve shadow data that is unmanaged, which can lead to higher containment and remediation costs.
Supply Chain Vulnerabilities: Societies’ Achilles’ Heel
Supply chain vulnerabilities represent significant risk factors in cybersecurity. Both criminal organizations and state-sponsored actors view these vulnerabilities as the “Achilles’ heel” of economies. Digital bottlenecks, whether from software compromises, managed service providers, or single-point disruptions, continue to expose organizations to major risks.
Facts and Figures
- By 2025, 45% of organizations expect significant cyber-attacks on their supply chains.
- The anticipated cost of software supply chain attacks could rise to USD 138 billion by 2031.
- Cloud providers, particularly vulnerable ones, have seen a 75% increase in intrusions due to misconfigurations.
Major Cyber Trends in 2025 and Beyond
As the landscape of cyber-attacks evolves, overarching trends significantly influence cyber risks. Foremost among these is artificial intelligence (AI), which is becoming a double-edged sword in cybersecurity. Additional factors influencing this space include regulatory landscapes, talent shortages, technological advancements, and ongoing geopolitical tensions.
Artificial Intelligence: Both Weapon and Target
Companies are increasingly adopting AI to improve efficiency and spur innovation. This transition marks the end of mere experimentation, as businesses now seek to scale AI solutions in various functional areas such as customer service, research, and especially cybersecurity.
However, this increase in AI usage also aids criminal groups, as they employ technologies to enhance their efficiency. Future cyber-attackers will likely innovate their methods, employing AI to streamline various attack phases, such as phishing and malware development.
Cyber experts predict the emergence of multi-agent AI systems, facilitating both malicious and protective capabilities. This democratization of AI poses unprecedented challenges for defenders, who will have to contend with enhanced speeds and sophisticated methodologies in the ongoing arms race of cybersecurity.
Meanwhile, Munich Re remains focused on understanding the implications of AI-driven cyber-attacks and their potential to increase claim frequencies, as well as ensuring that emerging risks are adequately covered through comprehensive insurance policies.
Nation-State Cyber Activities: Digital Battlegrounds
Geopolitical tensions and technological adversities have ushered in a new era of cyber threats, often fueled by state-sponsored actors. These entities are increasingly using cyber-attacks as tools for geopolitical maneuvering, targeting critical infrastructure across energy, transportation, and telecommunications sectors. The World Economic Forum reports that there were over 420 million cyber-attacks targeting critical infrastructure between January 2023 and January 2024, representing a 30% rise from the previous year.
Common nation-state attack methods include living-off-the-land tactics, cyber espionage, and supply chain exploitation. Traditional DDoS attacks and ransomware have evolved into national security concerns, as they compromise essential services while posing risks to economic stability.
As global tensions escalate, cyber warfare is likely to intensify, with disinformation campaigns using AI tools to further exacerbate geopolitical strife.
Mis- and Disinformation: High Stakes
The Global Risks Report by the World Economic Forum identifies mis- and disinformation as critical risks for the future. These threats are heightened by advancements in AI, allowing for rapid dissemination of false information. Techniques like “LLM grooming,” where AI models are flooded with misleading content, show the potential for misuse.
As disinformation spreads across corporate sectors, organizations must proactively establish credibility and transparency to counteract misinformation, with Gartner projecting corporate spending on combating such threats will exceed USD 30 billion by 2028.
Quantum Computing Security: The Race is On
While still in its nascent stages, advancements in quantum computing could drastically reshape cyber security. As organizations prepare for the declining efficacy of traditional encryption methods, the U.S. National Institute of Standards and Technology (NIST) has started adopting new algorithms designed to withstand quantum attacks. Cybercriminals may already be hoarding sensitive data for future exploitation, making this an urgent area of focus.
Robotics, OT, and IIoT: Redefining Boundaries
The increasing interconnectivity of IT, IIoT, and OT presents new opportunities, but also numerous security challenges. Convergence between legacy systems and modern technology necessitates robust security measures. The robotics industry, enhanced by AI, offers transformative potential across sectors like healthcare and manufacturing. However, tapping into this potential requires careful risk management, further establishing the importance of cyber insurance.
In a deeply digital world, cyber threats remain a dynamic force. The financial and reputational stability of any organization depends on effective cyber risk management, with insurance playing a crucial role. Munich Re aims to help clients build cyber resilience by offering expert guidance and a comprehensive range of services to navigate this evolving landscape of threats.
Untapped Potential: Significance of Cyber Insurance on the Rise
The global cyber insurance market continues to evolve, showing resilience even as threats grow in complexity. S&P Global Ratings highlighted a stable profitability trajectory for this sector, anticipating that the global premiums will more than double by 2030. The ongoing digitization of businesses alongside regulatory pressures will drive demand for cyber insurance.
Cyber Insurance Market Trends
As of 2024, the cyber insurance market reached USD 15.3 billion, representing a fraction of global property and casualty insurance. Despite past growth, projections indicate more than 10% annual growth as more firms recognize the importance of cyber protection. The North American market remains the largest, but Europe and Asia/Oceania are also expected to increase their shares significantly.
The competency of the cyber insurance industry, particularly driven by reinsurance expertise, will be key to navigating the inherent risks and ensuring sustainable coverage for clients.
The cyber protection gap poses significant challenges, threatening the economic well-being of individuals and companies alike. As the landscape of cyber threats continues to evolve, the insurance industry must focus on managing risk exposure while fostering long-term insurability for cyber risks. By leveraging innovative products and comprehensive services, providers can effectively address previously uninsured risks and enhance overall organizational resilience.
Efforts to bridge the protection gap are vital, especially for smaller and medium-sized organizations. Strategic partnerships and an improved understanding of risks are essential to develop innovative insurance solutions. By collaborating with cybersecurity experts, tech vendors, and governmental bodies, the industry can create a culture of continuous learning and adaptability to counter emerging risks effectively.