Cyber Threats Top Business Concerns Again as AI Reshapes Risk, Travelers Survey Shows

Businesses are boosting cyber defenses and insurance purchases even as artificial intelligence creates new vulnerabilities, according to The Travelers Companies' 2026 Travelers Risk Index.
By: | September 25, 2026
IT professional standing in a high-tech server room

Cyber threats have again emerged as the top overall concern of U.S. business decision makers, cited by 58% of respondents, according to the 2026 Travelers Risk Index.

It marks the fifth time in eight years that cyber has topped the annual survey’s list of business worries, ahead of broad economic uncertainty (55%), medical cost inflation (53%), the impact of the global economy on a company (49%), and global/political conflict, terrorism and social unrest (48%). Travelers said businesses are more knowledgeable about cyber threats and more confident in their defenses than in the past, but vulnerabilities persist as artificial intelligence becomes embedded in everyday operations.

AI Emerges As A Near-Equal Threat To Traditional Hacking

A security breach or cyber event involving AI ranked as the second-highest specific cyber concern among business leaders, cited by 55% and nearly tied with concerns about security breaches or hackers gaining unauthorized access to computer systems, cited by 56%, Travelers found. Other top cyber concerns included income loss caused by a vendor or supplier cyber incident (53%), unauthorized access to financial accounts (53%) and a system glitch causing company computers to go down (50%).

Among AI-specific worries, external threats dominated. Attackers using AI to identify and exploit system vulnerabilities was the top AI concern, cited by 56%, followed by AI-generated phishing, deepfakes or social engineering attacks aimed at employees or customers (54%). Other concerns included sensitive company data being retained to train external AI models (52%), employees inputting sensitive data into unsanctioned AI tools (51%), third-party vendors improperly using AI (50%), and inaccurate AI output leading to poor business decisions (48%).

Travelers pointed to a gap between AI adoption and governance as part of the challenge: 89% of survey participants reported day-to-day AI use within their workforce, but only 59% said they have formal practices in place to govern that use.

“This 30-point gap really stands out, and it cuts both ways,” said John Menefee, vice president and Enterprise Cyber Lead at Travelers. “Companies are focused on what cybercriminals are doing with AI, and that concern is justified. However, companies should be equally focused on the risks created by their own AI use when the right practices and policies aren’t in place.”

Cyber concerns also varied by industry, Travelers found. Banking, construction and technology companies cited unauthorized access to financial accounts as their top worry, while health care and manufacturing pointed to security breaches or hackers. Nonprofits were most concerned about employees putting information or systems at risk, and professional services and retail companies cited AI-related security breaches or events as their leading cyber concern.

Insurance Purchases And Cyber Controls Both Climb

Cyber insurance purchasing reached its highest level since the Travelers Risk Index became cyber-focused in 2018, with 70% of companies reporting they had purchased coverage, up seven percentage points from 2025, according to the report. The gains spanned company sizes: large businesses purchasing cyber insurance reached 82% in 2026, up from 73% in 2025, while small businesses climbed to 50%, up from 43% in 2025.

Adoption of cyber controls also rose year over year across nearly every measure tracked, Travelers said. Firewall use and data backups each reached 81%, up from 76%. Employee background checks rose to 79%, up from 70%, and protocols for onboarding and offboarding users climbed to 74%, up from 63%. The use of multifactor authentication to validate administrative users increased to 72%, up from 60%.

Self-reported confidence also grew, with two-thirds of respondents now rating themselves as extremely or very confident in their cyber practices, according to the survey. Businesses also expressed strong trust in their insurance carriers, with 92% saying they are confident in their carrier’s cybersecurity expertise and guidance.

Menefee said businesses view cyber threats as a serious concern and are getting smarter and more prepared, investing in controls, building confidence and turning to their insurance carrier for guidance.

“At the same time, the rapid rise of AI is creating opportunities for attackers just as companies are making progress on basic defenses,” he said. “The message is clear: Organizations of all sizes should treat cyber threats, especially AI-related cyber risk, as a core business issue and take steps to strengthen defenses.”

View the full report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance