Despite major cyber losses, the insurance market continues to offer favourable conditions. With regulators, investors and stakeholders demanding greater accountability, now is the time to demonstrate cyber resilience.
2026 key takeaways
As ransomware incidents, third-party disruptions and cyber events drive ongoing board-level concern and significant financial loss, many organisations continue to use 2026's buyer-friendly cyber market conditions to their advantage.
We’re seeing businesses reinvest premium savings. They’re securing higher cyber insurance limits, broader business interruption protection, stronger supply chain coverage, longer indemnity periods and better claims payment provisions while conditions remain favourable and exposures shift.
Strong insurer appetite, abundant capacity and increased competition have continued to create widespread opportunities to get more value from cyber insurance.
2026 cyber claims insights
Our Cyber Claims in Focus 2026 report, which analyses more than 5,500 cyber claims across 95 countries and approximately $1 billion in insurer payments, shows ransomware incidents remain the most financially severe cyber events. These incidents last 25 days on average, with business interruption accounting for more than half (52%) of ransomware losses.
Data breaches remain the most frequently reported cyber event, with third parties responsible for close to 50%.
While AI isn’t yet appearing as a stand-alone driver of cyber insurance claims, it is materially amplifying existing cyber exposures associated with phishing, social engineering and ransomware.
These realities should point many businesses toward reviewing whether current cyber limits reflect realistic recovery scenarios.
Maintaining strong cyber governance, supplier oversight and regular coverage reviews will help keep your programme effective and efficient.
Cyber market outlook into 2027
Strong competition, new market capacity, broader coverage offerings and greater underwriting flexibility continue to create favourable conditions for cyber insurance buyers, with the market expected to remain attractive through the coming months and into early 2027.
However, we’d caution against assuming competitive premiums and good conditions will continue indefinitely.
The January 1 reinsurance renewals, a major systemic cyber event, changing claims activity or increased geopolitical instability could all have an impact on capacity, pricing and insurer appetite.
Insurers are paying greater attention to how AI is accelerating existing risk. If your organisation is adopting AI across operations, expect insurers to focus more closely on data use and oversight, third-party tools and controls around business-critical systems.
Our Global Directors’ and Officers’ Survey 2026 found data loss and cyberattack remain among the most important risks facing directors and officers globally, while concerns about AI continue to outpace confidence in governance and oversight.
Those organisations able to demonstrate strong governance, accountability and measurable improvements in cyber maturity can pursue stronger insurance outcomes.
Many organisations now recognize cyber risk as a board-level concern. The challenge now is closing the gap between cyber risk concerns and the ability to deliver the levels of cyber governance and resilience required as exposures change.
Five actions to improve your cyber insurance outcome into 2027
- Treat cyber insurance as part of your resilience and recovery strategy, aligning coverage and limits with realistic loss and recovery scenarios.
- Review whether your limits, business interruption coverage and indemnity periods reflect the cyber scenarios and exposures that matter most to your business.
- Contemplate reinvesting market savings into broader coverage, higher limits, or lower retentions, rather than focusing solely on premium reduction.
- Consider AI, third-party dependencies and evolving technology risks when reviewing the policy wording.
- Use claims experience, loss scenarios and evidence of strong governance to support underwriting discussions and strengthen resilience.
How WTW can help you achieve better cyber insurance outcomes
- Our cyber specialists can help you optimise your cyber insurance programme before market conditions change.
- We can also help you quantify the financial impact of the cyber scenarios most relevant to your organisation and risk profile.
- Our latest CyCore V4 policy wording can help you respond to cyber incidents affecting your revenue, customer relationships, business recovery and AI exposures beyond traditional cyber insurance.
Contacts
