Takeaways:
- Data exfiltration comprised 40% of large cyber claims in H1.
- Ransomware is now targeting small and mid-sized companies, a component in 88% of data breaches.
- AI is helping threat actors create more “believable” phishing emails to steal credentials.
A new report from Allianz Commercial, the Cyber Security Resilience Outlook, provides some encouraging news when it comes to cyber claims: The first half of 2025 saw claims severity drop by 50%, while claims frequency declined by 30%. Ransomware continues to be the major driver of cyber claims, accounting for 60% of claims over €1mn ($1.1 million).
Cyberattacks focus on smaller companies
However, as larger companies have improved their cybersecurity training and risk management, threat actors are now focusing on smaller and mid-sized companies that don’t have the same high level of security. For these sized firms, ransomware was the source of 88% of the data breaches, finds wireless provider Verizon.
According to the Allianz report, territories such as Asia and Latin America have become new targets for cyberattacks. Threat actors are also changing their tactics regarding ransomware, now choosing to focus on double…