Cyber incidents – new report looks at the scale of the threat

Chris Hendricks, head of incident response at Coalition, said this good news comes as “organisations [become] increasingly aware of the threat ransomware poses.” In fact, Coalition policyholders experienced 50% fewer claims compared to the broader market. The severity of these claims has also waned, with almost half of the incidents resolved at no cost.

“They have started to implement controls such as offline data backups that allow them to refuse to pay the ransom and restore operations through other means,” Hendricks said.

However, the lower effectivity rate of ransomware attacks has caused hackers to turn to more “reliable” phishing methods like funds transfer fraud (FTF) to target individual employees. The percentage of claims with phishing as the primary attack vendor jumped from 42% in H2 2021 to 58% in H1 2022.

Small- to medium-sized organisations under $25 million in revenue are asked to be more vigilant since they have fewer resources to respond to attacks. H1 2022 saw the average cost of a claim for a small business increase 58% to US$139,000.

“Across industries, we continue to see high-profile attacks targeting organisations with weak or exposed infrastructure — which has become exacerbated by today’s remote working culture and companies’ dependence on third-party vendors,” Catherine Lyle, head of claims at Coalition, said. “Small businesses are especially vulnerable because they often lack resources. For these businesses, avoiding downtime and disruption is essential, and they must understand that active insurance is accessible.”

With ransomware gangs on the rise, Coalition warned that cyber incidents have the power to put small organisations out of business, which is why they need an active approach to managing risk.