Cyber Insurance Market Adapts to Evolving Threats

As cyber threats evolve with AI and geopolitical tensions, insurers face unprecedented challenges in protecting organizations worldwide, Munich Re reports.
By: | April 4, 2025
Topics: Cyber | News
cybersecurity threats

Munich Re projects the global cyber insurance market to reach $16.3 billion in gross written premiums in 2025 as organizations face intensifying threats from ransomware attacks, online scams, data breaches and supply chain vulnerabilities, according to a new report from the reinsurer.

Although cyber premium growth has slowed in the past two years, Munich Re estimates that by 2030 the cyber insurance market will double from today’s volume to $32.4 billion in premiums.

“In today’s technology-dependent world, organizations can only be successful if they strengthen their digital defenses with robust, multi-layered risk management,” stated Stefan Golling, a member of the Board of Management of Munich Re responsible for Global Clients and North America. “Cyber insurance is an effective component in this approach,” he emphasized.

The Growing Threat Landscape

The cyber risk environment continues to intensify across all sectors, with four attack types — ransomware, scams, data breaches and supply chain vulnerabilities — driving the majority of losses, the report noted.

Ransomware remains particularly devastating, showing a year-over-year increase in attacks of approximately 25% in 2024, with business interruption accounting for 51% of all ransomware loss costs.

Manufacturing, health care and government sectors are especially vulnerable, though Munich Re’s data confirms that “no organization is immune to falling victim to a cyber-attack.” The scale of these attacks is growing, exemplified by the payment of a record $75 million ransom by a Fortune 50 company to the Dark Angels ransomware gang, while the attack on Change Healthcare is expected to cost its parent UnitedHealth Group Inc. $2.4 billion.

Business email compromise (BEC) scams represent another major threat vector, with the FBI estimating global losses exceeding $55 billion from these attacks over the past decade. Approximately 500,000 people work directly as scammers, operating primarily from fraud factories in Southeast Asia, Munich Re noted.

The threat of data breaches has reached unprecedented levels, with an estimated 5.5 billion accounts compromised in 2024, which represents an eightfold increase from previous years, the report stated. The average loss from a data breach in 2024 was $4.9 million, up 10% from the previous year, per the report.

Supply chain vulnerabilities have emerged as the “Achilles’ heel” of economies and social infrastructure, according to Munich Re. The World Economic Forum indicates that 45% of organizations expect to face significant cyber-attacks on their supply chain by 2025, with the cost of software supply chain attacks projected to reach $138 billion by 2031.

Technology and Geopolitics Reshape the Risk Landscape

Artificial intelligence has emerged as a major challenge for cybersecurity, representing both a powerful defensive tool and an unprecedented amplifier of cyber threats, the report stated. Criminals increasingly leverage AI to enhance every phase of the “cyber kill-chain,” from sophisticated phishing campaigns to zero-day exploitations and malware development. This shift is creating a new normal that challenges defenders with unprecedented speed, scale and sophistication.

Geopolitical tensions continue to fuel state-sponsored cyber activity, with critical infrastructure facing more than 420 million attacks between January 2023 and January 2024, a 30% increase from 2022. Nation-states increasingly employ advanced persistent threats (APTs), living-off-the-land attacks, cyber espionage, and sophisticated supply chain infiltrations to advance strategic objectives.

Misinformation and disinformation represent another growing concern. The World Economic Forum has identified this as the greatest global risk for the immediate future, with AI tools potentially facilitating massive amplification of manipulation. Gartner research projects that corporate spending on combating misinformation will exceed $30 billion by 2028, consuming 10% of overall cybersecurity budgets, according to the report.

View the full report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance