At-Bay’s 2026 InsurSec Report shows a 7% year-over-year rise in claim frequency and an all-time average severity of $221,000, with ransomware the costliest incident type at a $508,000 average. Remote-access entry vectors dominated ransomware claims (notably VPN compromises and SonicWall devices), Akira activity spiked sharply with rapid deployments and high demands, smaller firms absorbed growing losses, financial fraud leveraged Cloudflare-hosted links, and third-party liability claims (driven by CIPA cases) rose steeply. #Akira #SonicWall
Keypoints
- Overall claim frequency rose 7% year-over-year while average severity reached a record $221,000.
- Ransomware severity averaged $508,000, making it the costliest incident type by a wide margin.
- Remote access dominated ransomware entry—87% of claims—with VPN compromises accounting for 73% and one in three claims involving SonicWall devices.
- Akira attacks surged 364% in late 2025, moved quickly, demanded an average $1.2 million, and victims with 24/7 MDR avoided encryption.
- Financial fraud remained ~30% of claims with email as the primary vector and Cloudflare-hosted links frequently abused, while third-party liability claims rose 70% driven by CIPA-related lawsuits.
Read More: https://www.helpnetsecurity.com/2026/04/23/cyber-insurance-claims-report/