Cyber Insurance Covers Breach Losses
Coverage from Dig In, Pluang, and others

This topic centers on cyber insurance claims and the kinds of losses most often driving payouts, especially data breaches, ransomware, and vendor-related incidents.
The material shows insurance covering most average breach losses, while also highlighting that some events remain highly costly because of downtime, business interruption, and legal or settlement expenses. It also points to emerging pressure from AI-enabled social engineering and less traditional exposures such as pixel-tracking litigation.
The framing shifts from broad cyber-insurance market maturation toward how coverage performs across incident severity and industry sectors. The material also introduces more specific emerging exposures, including pixel-tracking litigation and AI-related coverage gaps.
The story now places more emphasis on underwriting adequacy and the mismatch between actual exposure and coverage design, rather than mainly describing loss patterns. It also broadens the market context with rising U.S. breach costs, stronger litigation pressure, and more visible remediation economics.
The story has shifted from a general rise in breach costs to a more specific claims picture anchored by WTW data: cyber insurance is absorbing most ordinary breach losses, while ransomware remains the main source of outsized severity. The frame also broadens and sharpens around vendors, AI-assisted social engineering, and legal/pricing factors that now help determine privacy-loss economics.
- WTW provides the main claims dataset and market assessment.
- Claims span January 2013 through January 2026.
- Ransomware is identified as the highest-severity incident type.
- Vendor incidents are treated as a systemic loss driver.
- Legal and market factors now shape privacy-loss pricing.
Recent coverage points to rising breach costs, shifting cyber claim patterns, and growing pressure on cyber insurance terms. U.S. losses remain higher than global averages, while AI-enabled phishing, data theft, and litigation costs are making incidents more expensive and harder to classify.
