2025 Cyber Risks Report Highlights Third-Party Breach Impact

Article Highlights
Off On

The landscape of cyber threats has evolved significantly over the years, and as businesses venture further into the digital realm, the risks they face become increasingly complex. Coalition’s latest Cyber Claims Report offers a comprehensive analysis of cyber risks and security incidents that unfolded throughout 2024, offering valuable insights into the current threat environment. This report highlights key trends, such as the declining number of ransomware claims and the apparent impact of third-party breaches, which are reshaping cybersecurity strategies across industries. As cybercriminals continue to refine their tactics, organizations must acknowledge new challenges and adapt their defenses to stay ahead of potential threats.

Cyber Claims and Ransomware Trends

Declining Ransomware Losses

In 2024, Coalition customers reported a noticeable decrease in ransomware claims, a promising sign for the future of cyber defenses. These claims represented average losses of $108,000 within the United States, contrasting with a slightly higher global average of $115,000. The drop in average losses underscores effective preventive measures and enhanced detection systems. However, the overall reduction in ransomware claims does not negate the persistent threat of ransomware attacks. Business leaders and cybersecurity experts must remain vigilant, anticipating the ever-evolving tactics of cyber attackers and ensuring their systems are fortified against emerging threats.

Impact of Other Cyber Threats

While ransomware claims saw a decline, funds transfer fraud and business email compromise continued to pose significant challenges, accounting for 60% of claims submitted to Coalition. These incidents demonstrate the necessity of robust security protocols and employee training. The energy industry, in particular, emerged as a sector vulnerable to high-value claims, underscoring the need for increased attention to cybersecurity in industries responsible for critical infrastructure. Furthermore, the insurance funds requested by affected organizations for ransomware coverage decreased by 7% from 2023 to 2024. This reduction suggests an industry-wide shift in risk management strategies, aiming to mitigate losses through enhanced cybersecurity measures and better incident response.

The Rise of Third-Party Breaches

Supply-Chain Security Vulnerabilities

The report reveals a significant trend: the impact of third-party breaches due to supply-chain vulnerabilities. Over 52% of total claims resulted from breaches involving third-party vendors, highlighting the critical importance of securing supply chains. These breaches often stem from inadequate security measures across collaborating companies, making them lucrative targets for cybercriminals. Particular vendors like Change Healthcare and CDK Global were identified as common sources of claims, emphasizing organizations’ vulnerability to attacks through linked networks. As businesses increasingly integrate with various service providers, strengthening supply-chain security has become imperative to reducing potential risks and safeguarding sensitive information.

Consequences of Ignoring Cybersecurity Alerts

Neglecting cybersecurity warnings can prove to be costly, as illustrated by the substantial losses sustained by 614 companies that overlooked flagged vulnerabilities. These businesses incurred $307 million in losses from ransomware attacks, showcasing the dangers of reactive rather than proactive security measures. Coalition’s findings stress the importance of addressing known vulnerabilities promptly, minimizing the likelihood of successful attacks. The opportunity to recover funds from incidents of funds-transfer fraud offers a silver lining; Coalition successfully reclaimed $31 million in 2024, achieving full recovery in 12% of cases where policyholders swiftly reported fraudulent activities. Prompt responses and efficient communication between insurers and organizations can significantly mitigate losses and secure financial assets.

Proactive Measures for Cybersecurity

Importance of Quick Incident Response

The ability to respond quickly and effectively to cyber threats is paramount in minimizing damages and losses. Coalition’s report praises the successes achieved by organizations capable of rapidly identifying vulnerabilities and implementing remediation measures. In a world where attacks can happen in the blink of an eye, preparation and vigilance are essential. Encouraging cyber-awareness and cultivating strong security practices can drastically reduce the likelihood of monetary and reputational damages from cyber incidents.

Future Outlook on Cyber Risk Management

The landscape of cyber threats has undergone significant changes over the years, presenting intricate challenges as businesses increasingly delve into the digital domain. Coalition’s most recent Cyber Claims Report provides a thorough analysis of cyber threats and security incidents throughout 2024, delivering valuable insights into the prevailing threat environment. This report unveils key trends such as the reduction in ransomware claims and the noticeable impact of breaches involving third-party entities, prompting shifts in cybersecurity strategies across various sectors. As cybercriminals continue to enhance their methods, organizations must recognize emerging challenges and modify their defenses accordingly to remain proactive against potential attacks. This adaptation is crucial in the fast-paced world of digital security, ensuring that businesses not only protect their assets but also anticipate future vulnerabilities in the ever-evolving cyber landscape.

Explore more

Stockland Drops Sydney AI Data Center Amid Local Opposition

While the global demand for AI processing power continues to surge, the physical infrastructure supporting it is being forced into more remote regions to avoid the pushback from urban communities. The recent strategic pivot by major Australian developers Stockland and John Boyd Properties highlights a growing tension between the global push for artificial intelligence and local community interests. By withdrawing

Are Maxsun’s New MoDT Motherboards the Future of DIY NAS?

The SK-PTLNAS motherboard features a versatile four-port networking configuration that includes 10GbE, 2.5GbE, and dual 1GbE ports for dedicated management traffic and link aggregation. This announcement by Maxsun signals a profound transformation within the DIY hardware landscape, particularly for users focused on high-performance storage and home automation. By bridging the gap between mobile efficiency and desktop versatility, these Mobile on

Is ARTEX AI Redefining Autonomous Cloud Credential Abuse?

Autonomous agents have demonstrated the ability to turn legitimate management features like the Azure VM Run Command against organizations to execute malicious code within virtual machines. This development signifies a critical turning point in cybersecurity, where the traditional boundaries between administrative tools and offensive weaponry have completely dissolved. The emergence of the ARTEX AI framework has introduced a level of

TP-Link Launches Affordable Omada BE5000 Wi-Fi 7 Access

While many high-performance access points carry enterprise-level price tags, the BE5000 delivers professional management features at a cost comparable to consumer-grade electronics. This shift in the networking landscape reflects a growing demand for sophisticated connectivity solutions that do not require massive capital expenditures or recurring subscription fees. In 2026, the transition to Wi-Fi 7 has accelerated, leaving many organizations searching

Is Your SonicWall VPN Safe From This New MFA Bypass?

Security professionals must now verify specific build numbers for Gen 7 and Gen 8 firewalls rather than just checking major version numbers to ensure complete remediation. This critical directive comes in response to the discovery of CVE-2026-19868, a high-severity authentication bypass vulnerability that has sent shockwaves through the cybersecurity landscape. The flaw targets the Secure Sockets Layer Virtual Private Network

Fill out the form below