--- title: Ransomware Was the Top Cyber Insurance Claim in Q1 2020 description: Data from 25,000 small-to-midsize organizations reveals ransomware as the top cyber insurance claim in the first half of 2020, image: https://businessinsights.bitdefender.com/hubfs/closing%20insurance%20policy.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Sep 14, 2020 # Ransomware Was the Top Cyber Insurance Claim in Q1 2020 Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020&utm_medium=social&utm_source=facebook) - Ransomware retakes the lead (from business email compromise) as the top cyber insurance claim the first half of the year - Analysts observed a 47% increase in the severity of ransomware attacks, on top of a 100% increase from 2019 to Q1 2020 - Ransomware (41%), funds transfer loss (27%), and business email compromise incidents (19%) were the most frequent types of loss Data from 25,000 small-to-midsize organizations reveals ransomware as the top cyber insurance claim in the first half of 2020, with the average ransomware demand increasing 100% from 2019 through Q1 2020. In late 2019, AIG, one of the world's largest insurance companies, [issued a report](https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise?hsLang=en-us) saying business email compromise (BEC) had taken the baton from ransomware in the top threats causing business losses. In short, BEC became the top reason businesses made a cyber insurance claim last year. This year, however, cyber insurer Coalition says things are back to the way they were. According to the company’s [H1 2020 Cyber Insurance Claims Report](https://info.coalitioninc.com/download-2020-cyber-claims-report.html?utm_source=pr-newswire&utm_medium=web-referral&utm_campaign=dlc-2020-cyber-claims-report&utm_term=download&utm_content=press-release), ransomware is again the top cyber insurance claim – at least in the first half of the year. Since the beginning of the COVID-19 pandemic, the firm observed a 47% increase in the severity of ransomware attacks, on top of a 100% increase from 2019 to Q1 2020. It also found that newer strains of ransomware have been particularly malicious. For example, the average demand from the infamous Maze ransomware operators is approximately six times larger than the overall average ransom demand (from other threat actors). Maze operators pioneered their costly ransom demands by threatening to expose an organization’s data if they don’t pay the ransom demand. Competing operatives soon followed suit, with more and more threat actors applying the model this year, coercing their victims to cave in. Coalition also reports a 35% increase in funds transfer fraud and social engineering claims filed by their policyholders. The firm said losses from these types of attacks ranged from the low thousands to well above $1 million per event. Business Email Compromise is still alive and kicking, though. COVID-19 has marked what Coalition analysts call “a notable surge” in BEC scams targeting businesses – a 67% increase, to be precise, in the number of email-borne attacks during the pandemic. Ransomware (41%), funds transfer loss (27%), and business email compromise incidents (19%) were the most frequent types of loss — accounting for 87% of reported incidents and 84% of claims payouts in the first half of 2020, the firm concludes. Exploitation of remote access was the root cause of reported ransomware incidents (due to remote work). Simultaneously, email intrusion, invoice manipulation, and domain spoofing were the most common attack techniques for funds transfer fraud incidents. The cyber insurer also found that organizations that use Microsoft Outlook for email are more than three times as likely to experience a business email compromise than organizations that use Google Gmail. This finding states the obvious somewhat, considering BEC scams typically target business environments. ### Explore More Topics - [Enterprise Security (765)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (206)](https://businessinsights.bitdefender.com/topic/threat-research) - [SMB Security (193)](https://businessinsights.bitdefender.com/topic/smb-security) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [Ransomware (172)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (139)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (136)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (136)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (127)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (121)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Threat Intelligence (82)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [IT Compliance & Regulations (75)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (59)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (55)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (47)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (39)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (24)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (10)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (5)](https://businessinsights.bitdefender.com/topic/podcast) - [AI (2)](https://businessinsights.bitdefender.com/topic/ai) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [US Government Seeks to Sanction Companies that Pay Ransomware Operators](https://businessinsights.bitdefender.com/us-government-seeks-to-sanction-companies-that-pay-ransomware-operators?hsLang=en-us) ### [FBI Shows You How to Spot a Business Email Compromise Scam, Cuffs 281 BEC Operators](https://businessinsights.bitdefender.com/the-fbi-shows-you-how-to-spot-a-business-email-compromise-scheme-as-agency-cuffs-281-bec-operators?hsLang=en-us) ### [Securing the Human Layer – The First Sane Step Towards Achieving a Strong Cybersecurity Posture](https://businessinsights.bitdefender.com/securing-the-human-layer-the-first-sane-step-towards-achieving-a-strong-cybersecurity-posture?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender\_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2020-10-05T08:27:12.198Z", "datePublished" : "2020-09-14T11:45:19.000Z", "headline" : "Ransomware Was the Top Cyber Insurance Claim in Q1 2020", "image" : [ "https://businessinsights.bitdefender.com/hubfs/closing%20insurance%20policy.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/ransomware-top-cyber-insurance-claim-q1-2020", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```