A new study from Dragos and Marsh McLennan puts hard numbers on the global financial risk tied to OT cyber incidents. The 2025 OT Security Financial Risk Report estimates that the most extreme scenarios could place more than $329.5 billion at risk worldwide in a single year.
Insurance data shows $329.5B OT cyber risk
The analysis is built on a decade of insurance claims and incident data, modeled by Marsh McLennan’s Cyber Risk Intelligence Center. The dataset draws from one of the largest insurance claims repositories in the world and is independent of Dragos. This gives the findings weight in a space where OT-specific financial data has been scarce.
The report models three main financial scenarios. First, in a typical year where business interruption (BI) claims follow an OT incident, average risk could total $12.7 billion. When looking at all OT-related incidents, regardless of BI claims, the figure rises to $31.1 billion. For rare, high-impact “tail” events with a 0.4% likelihood in any given year, BI-related losses could reach $172.4 billion. When accounting for both direct and indirect costs, the total at risk in such a scenario could climb to $329.5…
