Navigating threat complexity

Global 2025 Cyber Risk Report

Executive Welcome

Welcome to Aon’s 2025 Global Cyber Risk Report, a study that follows a year of noteworthy systemic cyber events. This report stands alone in its ability to help businesses make better cyber risk decisions thanks to the unique way we have drawn together data and interpretation across critical cyber security controls, cyber events and the cyber insurance market — globally and by region.

Read more

01

Ransomware Payouts Decline Despite Growing Cyber Claims Frequency

Learn more

In 2024, cyber incidents were more frequent while ransomware remained a focal point. Understanding the evolving market dynamics and cyber risk landscape has never been more essential.

02

Cyber Risk Insurance Market Remains Buyer-Friendly

Learn more

Ample capacity and competition drove cyber risk insurance premiums lower in 2024. Learn how insurance is steering cyber risk preparedness and how to better manage large-scale systemic risks.

03

Raising a Red Flag: Cyber Risk Controls and Insurability

Learn more

As cyber risks dynamically change and threat actors shift their tactics, critical security — or red flag — controls can change. Find out how your organization compares in terms of cyber risk resilience.

04

Finance and Insurance Industries: Managing Risk in a Rapidly Evolving Environment

Learn more

Finance and insurance companies have more work to do to manage, mitigate and transfer cyber risks in a rapidly evolving risk environment.

05

Third-Party Risks Can Create Cyber Challenges for Healthcare

Learn more

The healthcare sector is contending with a range of risks specific to its sector — including its heavy reliance on third-party service providers, a growing technology footprint and tight budgets — that can increase the severity and complexity of cyber risks.

06

Cyber Risk in an Increasingly Digitalized Manufacturing Sector

Learn more

A combination of legacy systems, rapid digitalization and significant third-party vulnerabilities, makes cyber risk a growing concern — and a growing challenge — for the manufacturing sector.

07

Asia-Pacific’s Commitment to Cyber Security Pays Off

Learn more

Asia-Pacific’s cyber maturity continues to improve — in the face of considerable threat. Risk Leaders, therefore, should focus on geopolitical drivers of risk, a shifting regulatory environment, the impact of artificial intelligence and opportunities to help enhance risk capital protection.

08

Riding the Wave: EMEA Approaches Cyber Maturity

Learn more

With great volatility comes great cyber risk. Explore how a mix of security controls, cyber risk insurance and regulatory compliance can help your organization manage, mitigate and transfer cyber risk.

09

Cyber Risk is a Corporate Risk — Latin America Responds

Learn more

The Latin American region is maturing and the cyber insurance market is opening. Learn how businesses scored across critical cyber risks and assess your readiness to secure a cyber insurance policy in 2025.

10

North America - Cyber Risk Maturity Grows Amid Systemic Cyber Events

Learn more

Cyber risk insurance premiums declined as organizations invested in controls to manage large-scale systemic risk. It’s time to make the right decisions to ensure stability in a volatile cyber risk environment.

11

The Five Drivers That Can Help Mitigate Growing Reputation Risks

Learn more

Reputation risks related to cyber events are growing, but companies can help safeguard shareholder value by understanding and mitigating them.

12

A Highlight Year For Systemic Risk – And Single Point Of Failure Events

Learn more

Dealing with third parties involves real and unavoidable cyber risks. Capture insight into potential single points of failure and help protect your balance sheet against systemic risk.

13

Tackling Ransomware: Helping Insurers and Their Clients Keep Pace with Change

Learn more

An in-depth study reveals the benefits for both insurers and commercial buyers from implementing strong cyber controls in ransomware claims

14

Behind the Data: Better Decisions Facilitated Through Aon’s Cyber Broking Process

Learn more

Aon’s 2025 Cyber Risk Report leverages proprietary data from the Cyber Quotient Evaluation (CyQu), a patented global cyber e-submission platform, that helps streamline the insurance intake process and strengthens clients’ cyber risk management programs by delivering insights into exposures and insurability factors.

Chapter 1

Ransomware Payouts Decline Despite Growing Cyber Claims Frequency

In 2024, cyber incidents were more frequent while ransomware remained a focal point. Understanding the evolving market dynamics and cyber risk landscape has never been more essential.

Read Chapter 1

Global 2025 Cyber Risk Report

Read Local Results

Amid the rise of systemic cyber events and mounting third-party risk, navigating cyber risk requires more than just knowledge of the threat landscape. It requires what this report delivers: a 360-degree view of data across cyber incidents, critical security controls, and the cyber insurance market -globally and by region.

Key Takeaways
  1. Third-party cyber risk continued as a frontline issue across the year, as businesses found it increasingly challenging to protect their supply chains.
  2. Aon client organizations demonstrated a – 5% year-over-year improvement across critical cyber security controls that may impact insurability.
  3. After nine straight quarters of pricing decreases, cyber insurance pricing stabilized, ending with a 5% decline in 2024.

9

%

Year-over-year improvement for Aon renewal clients across critical cyber security controls deemed most important by the insurance industry


24

%

Rise in client-reported ransomware incidents across 2024, based on Aon analysis


6.7

%

Average premium decrease buyers achieved in 2024

Ransomware Payouts Decline Despite Growing Cyber Claims Frequency

In 2024, cyber incidents were more frequent while ransomware remained a focal point. Understanding the evolving market dynamics and cyber risk landscape has never been more essential.

Learn more
Cyber Risk Insurance Market Remains Buyer-Friendly

Ample capacity and competition drove cyber risk insurance premiums lower in 2024. Learn how insurance is steering cyber risk preparedness and how to better manage large-scale systemic risks.

Learn more
Raising a Red Flag: Cyber Risk Controls and Insurability

As cyber risks dynamically change and threat actors shift their tactics, critical security — or red flag — controls can change. Find out how your organization compares in terms of cyber risk resilience.

Learn more
Finance and Insurance Industries: Managing Risk in a Rapidly Evolving Environment

Finance and insurance companies have more work to do to manage, mitigate and transfer cyber risks in a rapidly evolving risk environment.

Learn more
Cyber Risk in an Increasingly Digitalized Manufacturing Sector

A combination of legacy systems, rapid digitalization and significant third-party vulnerabilities, makes cyber risk a growing concern — and a growing challenge — for the manufacturing sector.

Learn more
Cyber Risk in an Increasingly Digitalized Manufacturing Sector

A combination of legacy systems, rapid digitalization and significant third-party vulnerabilities, makes cyber risk a growing concern — and a growing challenge — for the manufacturing sector.

Learn more
Third-Party Risks Can Create Cyber Challenges for Healthcare

The healthcare sector is contending with a range of risks specific to its sector — including its heavy reliance on third-party service providers, a growing technology footprint and tight budgets — that can increase the severity and complexity of cyber risks.

Learn more
Asia-Pacific’s Commitment to Cyber Security Pays Off

Asia-Pacific’s cyber maturity continues to improve — in the face of considerable threat. Risk Leaders, therefore, should focus on geopolitical drivers of risk, a shifting regulatory environment, the impact of artificial intelligence and opportunities to help enhance risk capital protection.

Learn more
Riding the Wave: EMEA Approaches Cyber Maturity

With great volatility comes great cyber risk. Explore how a mix of security controls, cyber risk insurance and regulatory compliance can help your organization manage, mitigate and transfer cyber risk.

Learn more
Cyber Risk is a Corporate Risk — Latin America Responds

The Latin American region is maturing and the cyber insurance market is opening. Learn how businesses scored across critical cyber risks and assess your readiness to secure a cyber insurance policy in 2025.

Learn more
North America - Cyber Risk Maturity Grows Amid Systemic Cyber Events

Cyber risk insurance premiums declined as organizations invested in controls to manage large-scale systemic risk. It’s time to make the right decisions to ensure stability in a volatile cyber risk environment.

Learn more
The Five Drivers That Can Help Mitigate Growing Reputation Risks

Reputation risks related to cyber events are growing, but companies can help safeguard shareholder value by understanding and mitigating them.

Learn more
A Highlight Year For Systemic Risk - And Single Point Of Failure Events

Dealing with third parties involves real and unavoidable cyber risks. Capture insight into potential single points of failure and help protect your balance sheet against systemic risk.

Learn more
Tackling Ransomware: Helping Insurers and Their Clients Keep Pace with Change

An in-depth study reveals the benefits for both insurers and commercial buyers from implementing strong cyber controls in ransomware claims

Learn more
Behind the Data: Better Decisions Facilitated Through Aon’s Cyber Broking Process

Aon’s 2025 Cyber Risk Report leverages proprietary data from the Cyber Quotient Evaluation (CyQu), a...

Learn more