Backup strategies are working, and ransomware gangs are responding with data theft

The report analyzes 2025 cyber insurance claims across multiple countries and finds BEC (31%) and funds transfer fraud (27%) together comprising 58% of claims, with ransomware making up 21% of claims and average initial ransom demands rising to just over $1,019,000; common vectors include VPN/RDP exposure and software exploits, while social engineering underpins most FTF events. It details variant-level trends (Akira, Qilin, RansomHub), high rates of dual extortion, recovery and payment statistics, and prescriptive mitigations such as hardened immutable backups, access controls, and data governance.