{ "name": "Insurance by Profession Cyber Claims Severity Benchmark", "title": "Cyber Claims Severity Benchmark", "url": "https://insurancebyprofession.com/datasets/cyber-claims-severity-benchmark/", "csv": "https://insurancebyprofession.com/datasets/cyber-claims-severity-benchmark.csv", "markdown": "https://insurancebyprofession.com/datasets/cyber-claims-severity-benchmark/index.md", "computed_at": "2026-10-21", "license": "https://insurancebyprofession.com/terms", "headline": "The median published figure in the Cyber Claims Severity Benchmark is 137,500 USD across 2 sources' own pages in USD (range 115,000 to 160,000 USD; 3 sources publish a figure), read 12 October 2026.", "quotes": [ "The median published figure in the Cyber Claims Severity Benchmark is 137,500 USD across 2 sources' own pages in USD (range 115,000 to 160,000 USD; 3 sources publish a figure), read 12 October 2026.", "3 of the 16 named sources read in full publish a figure; 13 publish none, read 12 October 2026.", "Cyber Claims Severity Benchmark, series regulator: median 80,850 AUD across 1 source, read 12 October 2026.", "Cyber Claims Severity Benchmark, series insurer-claims: median 137,500 USD across 2 sources, read 12 October 2026.", "The median is unchanged since 26 September 2026 (was 137,500 USD across 2)." ], "citation": "\"Insurance by Profession Cyber Claims Severity Benchmark\", updated 2026-10-21, https://insurancebyprofession.com/datasets/cyber-claims-severity-benchmark/.", "changed_since": { "since": "2026-09-26", "previous_median": 137500, "delta": 0, "direction": "unchanged", "sentence": "The median is unchanged since 26 September 2026 (was 137,500 USD across 2)." }, "national": { "unit": "USD", "n": 2, "median": 137500, "min": 115000, "max": 160000, "p25": null, "p75": null, "mean": 137500, "units": { "AUD": 1, "USD": 2 }, "published_sources": 3, "named_sources": 16, "read_sources": 16, "not_published": 13, "published_share": 0.188 }, "by_axis": { "series": { "regulator": { "AUD": { "n": 1, "median": 80850, "min": 80850, "max": 80850, "p25": 80850, "p75": 80850, "mean": 80850 } }, "insurer-claims": { "USD": { "n": 2, "median": 137500, "min": 115000, "max": 160000, "p25": null, "p75": null, "mean": 137500 } } } }, "rows": [ { "source": "ASD/ACSC Annual Cyber Threat Report 2024-25", "url": "https://www.cyber.gov.au/about-us/view-all-content/reports-and-statistics/annual-cyber-threat-report-2024-2025", "figure": "$80,850", "value": 80850, "unit": "AUD", "vat": null, "axis": { "series": "regulator" }, "retrieved_at": "2026-10-12", "quote": "Average self-reported cost of cybercrime per report for businesses, up 50% overall ($80,850)", "source_class": "primary-government", "text_sha256": "2be2fcf051dd8a13921c741a79c17ef4f9248b8f9eef107ac0ddcfb35aa4d0ab" }, { "source": "Marsh: ransomware in cyber insurance claims", "url": "https://www.marsh.com/en/services/cyber-risk/insights/ransomware-a-persistent-challenge-in-cyber-insurance-claims.html", "figure": "$160,000, ", "value": 160000, "unit": "USD", "vat": null, "axis": { "series": "insurer-claims" }, "retrieved_at": "2026-10-12", "quote": "During the last five quarters, the median cost of breach response expenses remained around $160,000, while the average has trended upwards, from $963,000 in the third quarter of 2023 to $1 million in the fourth quarter, primarily due to a few large cyber events.", "source_class": "secondary", "text_sha256": "4a06298582d8aa0979cb62ca65076bf83933bda246cbf0486e25715f1bc65ad4" }, { "source": "The Coyle Group cyber insurance claims examples", "url": "https://thecoylegroup.com/insurance-by-coverage/cyber-insurance/cyber-insurance-claims-examples/", "figure": "$115,000 ", "value": 115000, "unit": "USD", "vat": null, "axis": { "series": "insurer-claims" }, "retrieved_at": "2026-10-12", "quote": "Average claim cost: $115,000 globally ($108,000 in the U.S.), but ransomware attacks average $292,000", "source_class": "primary-provider-own-site", "text_sha256": "da4b1ecc2b184c776ea69938f247e518f79c96aaf98dd190e83b67dc5d55fb37" } ], "not_published": [ { "source": "HHS OCR breach portal", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS: breach reporting", "url": "https://www.hhs.gov/hipaa/for-professionals/breach-notification/breach-reporting/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "FBI IC3 annual reports", "url": "https://www.ic3.gov/AnnualReport/Reports", "retrieved_at": "2026-10-11", "reason": "read in full and no accepted figure on the page" }, { "source": "FBI IC3", "url": "https://www.ic3.gov/", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "FBI IC3 2024 Internet Crime Report (PDF)", "url": "https://www.ic3.gov/AnnualReport/Reports/2024_ic3report.pdf", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO data security incident trends", "url": "https://ico.org.uk/action-weve-taken/complaints-and-concerns-data-sets/data-security-incident-trends/", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK Cyber Security Breaches Survey", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "OAIC notifiable data breaches statistics dashboard", "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breach-statistics-dashboard", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "OAIC notifiable data breaches publications", "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "OAIC notifiable data breaches report: July to December 2024", "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications/notifiable-data-breaches-report-july-to-december-2024", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "OAIC: data breach notifications at an all-time high in 2025", "url": "https://www.oaic.gov.au/news/media-centre/data-breach-notifications-increase-to-all-time-high-in-2025,-new-ndb-stats-show", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "California Attorney General data breach list", "url": "https://oag.ca.gov/privacy/databreach/list", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "Washington Attorney General data breach notifications", "url": "https://www.atg.wa.gov/data-breach-notifications", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf", "label": "HHS OCR breach portal", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/breach-notification/breach-reporting/index.html", "label": "HHS: breach reporting", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ic3.gov/AnnualReport/Reports", "label": "FBI IC3 annual reports", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ic3.gov/", "label": "FBI IC3", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ic3.gov/AnnualReport/Reports/2024_ic3report.pdf", "label": "FBI IC3 2024 Internet Crime Report (PDF)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/action-weve-taken/complaints-and-concerns-data-sets/data-security-incident-trends/", "label": "ICO data security incident trends", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025", "label": "GOV.UK Cyber Security Breaches Survey", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breach-statistics-dashboard", "label": "OAIC notifiable data breaches statistics dashboard", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications", "label": "OAIC notifiable data breaches publications", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications/notifiable-data-breaches-report-july-to-december-2024", "label": "OAIC notifiable data breaches report: July to December 2024", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.oaic.gov.au/news/media-centre/data-breach-notifications-increase-to-all-time-high-in-2025,-new-ndb-stats-show", "label": "OAIC: data breach notifications at an all-time high in 2025", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.cyber.gov.au/about-us/view-all-content/reports-and-statistics/annual-cyber-threat-report-2024-2025", "label": "ASD/ACSC Annual Cyber Threat Report 2024-25", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://oag.ca.gov/privacy/databreach/list", "label": "California Attorney General data breach list", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.atg.wa.gov/data-breach-notifications", "label": "Washington Attorney General data breach notifications", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.marsh.com/en/services/cyber-risk/insights/ransomware-a-persistent-challenge-in-cyber-insurance-claims.html", "label": "Marsh: ransomware in cyber insurance claims", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://thecoylegroup.com/insurance-by-coverage/cyber-insurance/cyber-insurance-claims-examples/", "label": "The Coyle Group cyber insurance claims examples", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 3 of the 16 named sources that could be read published a usable figure; 13 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in USD (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 29 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per jurisdiction per period: notified breaches, their cause split and the authority's own cost figure, from each regulator's own series (HHS OCR, the state AG registers, the ICO, the OAIC, the ASD); across them, the frequency a business of a given size faces and the severity it faces, set against the limits sold in the price index - the answer to 'how much do I need' that no seller's page computes, because no seller holds all four countries' registers", "embed": "

137,500 USD

median published figure, Cyber Claims Severity Benchmark, across 2 sources, read 12 October 2026

Source: Insurance by Profession Cyber Claims Severity Benchmark
" }