Oct 28, 2025

a comprehensive analysis of the two most prominent cyber threat vectors: email and remote access. Based on At-Bay claims data, the report reveals these two threat vectors together accounted for 90% of cyber claims in 2024, when excluding incidents caused by third-party compromises or non-cyber events. The report's key findings highlight a cyber threat landscape where attackers are outpacing traditional defenses, making email fraud prevention and Managed Detection and Response (MDR) critical to driving down losses. “Email fraud is now one of the biggest drivers of losses, yet most security tools are still focused on phishing links and malware,” said Adam Tyra, Chief Information Security Officer (CISO) for Customers at At-Bay. “Our claims analysis shows nearly all email security solutions performed worse in 2024, and are failing to catch AI-driven fraud emails that look legitimate. Providers must pivot to fraud-specific detection, or companies will keep losing money.” The findings in this report represent an analysis of more than 100,000 policy years of cyber claims data from 2021 through the first quarter of 2025. Key Findings Email Remote Access Tyra added, “Modern remote access devices are increasingly complex and vulnerable, making ransomware intrusions harder to prevent and more inevitable. Our data shows that the only control consistently stopping full encryption from ransomware is professionally managed detection and response, which is fast becoming the critical last line of defense. MDR services ensure that when attackers gain a foothold, human experts can contain and remediate the threat before it becomes a major loss event.” With cyber criminals clearly outpacing traditional defenses, At-Bay's report highlights how technical claims insights can help businesses and brokers identify the products carrying the greatest risk — and make more informed cybersecurity and insurance decisions. To download the full report and learn how organizations can better protect themselves from cybercrime, visit: 2025 InsurSec Rankings Report: Email and Remote Access Other resources: About At-Bay At-Bay is the InsurSec provider for the digital age. By combining world-class technology with industry-leading insurance, At-Bay was designed from the ground up to empower businesses of every size to meet cyber risk head-on. At-Bay Insurance Services, LLC provides insurance protection and security prevention solutions to close to 40,000 businesses in the US, safeguarding up to $800B in collective business revenue, and offers coverage by non-admitted insurers for Cyber, Technology Errors & Omissions (Tech E&O), and Miscellaneous Professional Liability (MPL). As a security company, At-Bay offers proprietary security solutions including At-Bay Stance Managed Detection & Response (MDR).