A.I.-Powered Cyber Threats Are Here: What Consumers, Business Owners and Agents Need to Know

A new Nationwide survey reveals a widening gap between awareness of A.I.-enabled cyber risks and preparedness to respond — and points to the growing role of insurers in closing it.
By: | October 29, 2026

 

Cyber threats are evolving faster than the people and businesses they target.

According to Nationwide’s latest Agency Forward cybersecurity survey, more than 8 in 10 consumers (84%) are concerned about criminals using A.I. to steal someone’s identity, and 81% of mid-market business owners worry about a potential cyberattack on their business. Yet across every audience surveyed; consumers, small business owners, mid-market business owners and independent insurance agents, awareness of the threat is outpacing readiness to respond.

The findings, drawn from a survey of 1,000 consumers, 300 small business owners, 300 mid-market business owners and 300 independent agents conducted in July 2026, paint a picture of an insurance landscape in which cyber risk has moved from an emerging concern to a core business and household exposure. They also point to a growing opportunity for agents to serve as trusted advisers in a space where knowledge gaps remain wide.

The Chief Cyber Concerns

Among consumers, the top-of-mind cyber worries center on the security of personal information. More than 8 in 10 are moderately or very worried about data breaches exposing personal information (82%), loss of privacy from data collection (80%), identity theft (79%) and financial fraud (79%). Three-quarters are concerned about A.I.-generated scams and impersonation attempts, including cloned voices, fake videos and fake messages.

Baby Boomers are particularly alert to the A.I. threat. Ninety-one percent of them are concerned about criminals using A.I. to steal someone’s identity, compared with 84% of consumers overall. Despite that heightened awareness, a third of Boomers (33%) say they are not at all confident they could identify an A.I.-powered scam.

For business owners, concern is just as sharp. More than two-thirds of small business owners (68%) and 4 in 5 mid-market business owners (81%) are concerned about a potential cyberattack, citing financial loss, business disruption and exposure of sensitive customer, employee or business information as their top worries.

Roughly three-quarters of small business owners (72%), mid-market business owners (76%) and agents (73%) are also moderately or extremely concerned that A.I. is increasing the speed, scale and sophistication of cyberattacks.

Agents are hearing those concerns loud and clear from their clients. Nearly 8 in 10 agents (79%) report that their commercial lines clients are moderately or extremely concerned about potential cyberattacks, and 62% say the same of personal lines clients. At the same time, 80% of agents are concerned about the general lack of cybersecurity knowledge among their clients, and 76% say many clients are unaware of their exposure to cyberattacks.

Where Losses Are Hitting Hardest

The data shows that cyber incidents are no longer rare events. They are frequent, costly and increasingly powered by A.I.

Among consumers, 80% report that they or someone they know has experienced a cybersecurity threat in the past year. Phishing is the most common incident (53%), followed by financial fraud (48%), data breaches (45%) and online shopping scams (40%). Nearly a third (32%) have experienced identity theft. For those affected, the greatest impacts are the time spent resolving the issue and the emotional stress and anxiety that follow — impacts that can linger well beyond any direct financial loss.

For businesses, the exposure is even more pronounced in the middle market. Sixty-two percent of mid-market business owners say their business has experienced a cyberattack — a six-point increase since 2024 — compared with just 16% of small business owners. Phishing (45%), password attacks (33%) and A.I.-assisted phishing or social engineering attacks (38%) top the list of threats experienced among mid-market business owners.

Strikingly, 55% of mid-market business owners who have been attacked say the incident involved threats powered by or generated using A.I. Roughly a quarter of small business owners (26%) and more than a third of mid-market business owners (36%) say their company was targeted by a generative-A.I. scam or fraud attempt in the past year — often an email impersonating an executive or an A.I.-generated phishing message.

The financial toll is rising. Among businesses that experienced a cyberattack, 86% of mid-market business owners report that the attack impacted or jeopardized their finances — a 19-point increase since 2024. Nearly every victim (94%) also reports damage to customer trust. Agents are seeing the same pattern, with 52% reporting an increase in claims related to generative-A.I. scams or fraud attempts in the past 12 months.

What Consumers and Business Owners Are Asking of Their Agents

As the threat landscape expands, so does the demand for guidance and coverage and agents are increasingly at the center of the conversation.

Nine in 10 agents (90%) say clients view them as a credible source of cybersecurity information, and 89% say they regularly recommend cyber insurance to their customers.

Among business owners, interest in cyber protection resources is overwhelming: more than 9 in 10 small business owners express interest in business interruption protection (92%), data compromise protection (91%) and identity recovery protection (90%), with similarly strong interest among mid-market business owners.

Cyber insurance adoption is accelerating in the middle market. Nearly three-quarters of mid-market business owners (73%) now purchase cyber insurance — a 34-point jump since 2024. Small business adoption, however, has remained stagnant at 42%, in part because of knowledge gaps. Among uninsured small business owners, 29% say they don’t know enough about cyber insurance and 24% didn’t know it was available.

Business owners are also asking for more than just a policy. The top-ranked offerings small business owners want from an insurer include cyber defense preparation programs (85%), discount offers tied to a track record of better cyber defense (84%) and a system where the insurer works directly with a security service provider to manage a claim (83%). Mid-market business owners rank similar services at the top of their wish list.

The need for guidance is just as clear on the preparedness side. Just 24% of agents estimate that most of their commercial clients have an incident response plan in place, and only 30% say most clients keep their cyber coverage level up to date with the evolving threat landscape. Two-thirds of small business owners (66%) admit they haven’t given much thought to what they would do if they fell victim to a cyberattack.

A.I. is only sharpening the urgency. Eighty-eight percent of small business owners and 75% of mid-market business owners say they need more information and resources to protect their businesses from A.I.-enabled cyberattacks. Among agents, 62% say they need more information and resources to help protect their clients from the same.

Consumers are asking for help, too. More than half (55%) say they would be interested in a service to help individuals or families respond to cyberbullying or online harassment — a reflection of how cyber risk has expanded well beyond financial accounts into everyday digital life.

Closing the Gap

The survey makes clear that awareness alone is no longer enough. Consumers know the A.I. threat is here, but only 19% are highly confident they could identify an A.I.-powered scam, and just 17% have created a family code phrase to verify a loved one’s identity during an urgent call. Businesses recognize the risk, but many lack the training, planning and coverage to match it.

For agents, the data points to an expanding advisory role — one that extends beyond selling a policy to helping clients build incident response plans, reassess coverage as exposures change, and understand how A.I. is reshaping the threat landscape. For consumers and business owners, it points to a simple truth: the time to prepare is before the attack, not after.

Click here to view Nationwide’s latest Agency Forward cybersecurity survey. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance