Navigating threat complexity
Global 2025 Cyber Risk Report

Executive Welcome
Welcome to Aon’s 2025 Global Cyber Risk Report, a study that follows a year of noteworthy systemic cyber events. This report stands alone in its ability to help businesses make better cyber risk decisions thanks to the unique way we have drawn together data and interpretation across critical cyber security controls, cyber events and the cyber insurance market — globally and by region.
01

Ransomware Payouts Decline Despite Growing Cyber Claims Frequency
Learn moreIn 2024, cyber incidents were more frequent while ransomware remained a focal point. Understanding the evolving market dynamics and cyber risk landscape has never been more essential.
02

Cyber Risk Insurance Market Remains Buyer-Friendly
Learn moreAmple capacity and competition drove cyber risk insurance premiums lower in 2024. Learn how insurance is steering cyber risk preparedness and how to better manage large-scale systemic risks.
03

Raising a Red Flag: Cyber Risk Controls and Insurability
Learn moreAs cyber risks dynamically change and threat actors shift their tactics, critical security — or red flag — controls can change. Find out how your organization compares in terms of cyber risk resilience.
04

Finance and Insurance Industries: Managing Risk in a Rapidly Evolving Environment
Learn moreFinance and insurance companies have more work to do to manage, mitigate and transfer cyber risks in a rapidly evolving risk environment.
05

Third-Party Risks Can Create Cyber Challenges for Healthcare
Learn moreThe healthcare sector is contending with a range of risks specific to its sector — including its heavy reliance on third-party service providers, a growing technology footprint and tight budgets — that can increase the severity and complexity of cyber risks.
06

Cyber Risk in an Increasingly Digitalized Manufacturing Sector
Learn moreA combination of legacy systems, rapid digitalization and significant third-party vulnerabilities, makes cyber risk a growing concern — and a growing challenge — for the manufacturing sector.
07

Asia-Pacific’s Commitment to Cyber Security Pays Off
Learn moreAsia-Pacific’s cyber maturity continues to improve — in the face of considerable threat. Risk Leaders, therefore, should focus on geopolitical drivers of risk, a shifting regulatory environment, the impact of artificial intelligence and opportunities to help enhance risk capital protection.
08

Riding the Wave: EMEA Approaches Cyber Maturity
Learn moreWith great volatility comes great cyber risk. Explore how a mix of security controls, cyber risk insurance and regulatory compliance can help your organization manage, mitigate and transfer cyber risk.
09

Cyber Risk is a Corporate Risk — Latin America Responds
Learn moreThe Latin American region is maturing and the cyber insurance market is opening. Learn how businesses scored across critical cyber risks and assess your readiness to secure a cyber insurance policy in 2025.
10

North America - Cyber Risk Maturity Grows Amid Systemic Cyber Events
Learn moreCyber risk insurance premiums declined as organizations invested in controls to manage large-scale systemic risk. It’s time to make the right decisions to ensure stability in a volatile cyber risk environment.
11

The Five Drivers That Can Help Mitigate Growing Reputation Risks
Learn moreReputation risks related to cyber events are growing, but companies can help safeguard shareholder value by understanding and mitigating them.
12

A Highlight Year For Systemic Risk – And Single Point Of Failure Events
Learn moreDealing with third parties involves real and unavoidable cyber risks. Capture insight into potential single points of failure and help protect your balance sheet against systemic risk.
13

Tackling Ransomware: Helping Insurers and Their Clients Keep Pace with Change
Learn moreAn in-depth study reveals the benefits for both insurers and commercial buyers from implementing strong cyber controls in ransomware claims
14

Behind the Data: Better Decisions Facilitated Through Aon’s Cyber Broking Process
Learn moreAon’s 2025 Cyber Risk Report leverages proprietary data from the Cyber Quotient Evaluation (CyQu), a patented global cyber e-submission platform, that helps streamline the insurance intake process and strengthens clients’ cyber risk management programs by delivering insights into exposures and insurability factors.
Chapter 1
Ransomware Payouts Decline Despite Growing Cyber Claims Frequency
In 2024, cyber incidents were more frequent while ransomware remained a focal point. Understanding the evolving market dynamics and cyber risk landscape has never been more essential.
Read Chapter 1Global 2025 Cyber Risk Report
Read Local Results
Amid the rise of systemic cyber events and mounting third-party risk, navigating cyber risk requires more than just knowledge of the threat landscape. It requires what this report delivers: a 360-degree view of data across cyber incidents, critical security controls, and the cyber insurance market -globally and by region.
Key Takeaways
- Third-party cyber risk continued as a frontline issue across the year, as businesses found it increasingly challenging to protect their supply chains.
- Aon client organizations demonstrated a – 5% year-over-year improvement across critical cyber security controls that may impact insurability.
- After nine straight quarters of pricing decreases, cyber insurance pricing stabilized, ending with a 5% decline in 2024.
9
%Year-over-year improvement for Aon renewal clients across critical cyber security controls deemed most important by the insurance industry
24
%Rise in client-reported ransomware incidents across 2024, based on Aon analysis
6.7
%Average premium decrease buyers achieved in 2024