Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims

The Resilience insurance report warns of a sharp increase in extortion-only attacks in 2025 driven largely by data theft rather than encryption—65% of extortion claims involved no encryption and data theft accounted for 87% of ransomware claims—urging organizations to prioritize prevention (DLP, zero trust), prepare decision frameworks and retain legal/IR/negotiation support, protect insurance policy data, and run tabletop exercises to manage ransom decisions and long-tail financial impacts.