Third-Party Risk Drives Surge in Cyber Claims, Incurred Losses

Third-party vulnerabilities drive cyber insurance losses as ransomware and vendor outages dominate 2024 claims, Resilience reports.
By: | February 28, 2025
Topics: Claims | Cyber | News
Businessmen use laptops with virtual warning signs warning them about visiting potentially dangerous websites

Third-party risk has emerged as a significant driver of cyber insurance claims and material losses in 2024, according to cyber risk solutions company Resilience, highlighting the growing threat posed by interconnected systems and reliance on software vendors.

Resilience’s data shows that third-party risk, including ransomware and vendor outages, accounted for 31% of all cyber insurance claims in 2024, marking a substantial increase from previous years. Notably, third-party risk led to claims with incurred losses for the first time, making up nearly a quarter (23%) of incurred claims in 2024, compared to 0% in 2023.

“Third-party risk isn’t only making headlines—it’s driving unprecedented losses,” said Vishaal Hariprasad, co-founder and CEO of Resilience. “Businesses can no longer afford to consider their partners’ vulnerabilities as siloed from their own. By understanding this new reality of shared risk, enterprises can make smarter business decisions and meaningfully mitigate material loss.”

Ransomware remained a top cause of loss in 2024, with 43% of incurred claims involving first-party ransomware incidents and 18% involving ransomware attacks targeting vendors, the Resilience analysis found. In total, 61% of all claims with losses were related to ransomware.

Transfer fraud, in which cybercriminals deceive individuals or organizations into sending money to fraudulent accounts, also saw a rise, accounting for 18% of incurred claims in 2024, up from 14% in 2023.

Transportation, manufacturing, and health care were the leading sources of incurred claim frequency in 2024, likely due to their reliance on often outdated operational technology and high downtime costs, according to Resilience. Meanwhile, health care and finance led in claim reporting frequency, potentially due to stricter regulatory environments and reporting requirements.

Despite these challenges, there were some positive developments, the company said. Phishing, once a primary point of failure, led to just 9% of incurred claims in 2024, a significant drop from 20% in 2023.

View the report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance