Glowing shield outline on a circuit board

Cyber risk has changed. Has your coverage?

Cyber risk and coverage in 2026

Five places the risk sits right now, and what the 2026 data says about each.

Ransomware

96%

Among ransomware cases where the organization size was known, about 96% of victims were businesses with fewer than 1,000 employees.¹

Funds transfer fraud

58%

Business email compromise and funds transfer fraud together made up 58% of all cyber claims.²

Website tracking

77%

Among wrongful collection claims, 77% arose from user activity on websites. Only 19% of websites display a consent banner.³

Time to recover

247 days

The global average breach took 247 days to identify and contain.⁴

Untested backups

27%

88.4% of businesses keep backups. Only 61.4% have tested them, which leaves 27% relying on backups nobody has proven.⁵

What stands behind you when a door opens

Good habits close most of the openings. Cyber coverage handles the day something gets through anyway, and what it does is specific.

Recovering the money

When funds are stolen, recovery starts immediately. Last year, cyber liability coverage recovered $21.8 million from funds transfer fraud, averaging $202,000 per recovery.²

Getting you running again

Incident response is the part you can’t build in advance. The right cyber coverage brings response teams, including negotiators who cut initial ransom demands by 65% on average last year.²

Absorbing the cost

Smart coverage helps you get back up and running. Last year, 64% of closed cyber claims were resolved with no out-of-pocket loss for the policyholder.²

Cyber questions every leader should ask

Is my business a target?

Cybercriminals rarely pick a business by name — they scan for openings at scale and take whatever they find. That is why being small or low-profile isn’t protection. You are not being chosen, you are being found. The openings, though, are ones you can close.

What does a cyber incident cost?

More than most businesses expect. Stolen funds, systems rebuilt, legal exposure and lost productivity all cost businesses while incidents are handled. Cyber coverage is built for that stretch.

We already have strong security. Do we still need coverage?

Strong security closes most of the openings and it is worth the investment. It cannot close all of them though, and it does nothing about the cost once something gets through. Coverage is not a substitute for good practice — it is what handles the recovery, the liability and the bill on the day practice is not enough.

How do I find out what my business needs?

Start with a conversation. A local Highstreet agent will look at how your business operates, where your exposure sits and what your current policies do and don’t reach. It takes one conversation with someone who knows your community, and you come away knowing where you stand.

Know where you stand.
Then see possible.

One conversation with a local Highstreet agent tells you which doors are open, what your current policies reach and what they don’t. No obligation, just a clear picture of your business and what stands behind it.

  1. Verizon (2026). 2026 Data Breach Investigations Report.
  2. Coalition (2026). 2026 Cyber Claims Report.
  3. Coalition (2025). The State of Web Privacy.
  4. IBM (2026). Cost of a Data Breach Report 2026.
  5. National Cybersecurity Alliance (2026). 2026 Small Business Cybersecurity Awareness & Practices Survey.

Coverage terms and availability vary. Talk to your local Highstreet agent for details.