Cyber insurance market data reports total premiums falling for the first time, to around $9.14 billion, while claims rose 40%. Separately, firms are being quoted premium increases of 15% to 20% for 2026.
Those look contradictory and are not. Aggregate premium is price multiplied by volume, and the two moved in opposite directions.
Competition Drove Rates Down Before Losses Caught Up
Cyber has been an attractive line for capital. Capacity entered, competition pushed rates down, and aggregate premium can fall even as the number of policies grows.
Loss data arrives later than pricing. The claims that inform 2026 rates are from incidents that happened earlier, which is why a market can be softening at exactly the moment its underlying risk is deteriorating.
The Correction Lands Unevenly
A 15–20% increase is an average across a market that is pricing on control posture. Organisations demonstrating the conditions described in 26-0416 face modest rises; those that cannot face far larger ones, higher deductibles, or declinature.
That is insurance functioning as intended — risk-based pricing creating an incentive to reduce risk. It also means the organisations least able to fund controls face the sharpest increases, which is the same regressive pattern this desk filed for water utilities in 26-0729 and school districts in 26-0228.
What This Desk Watches
Not the premium figure. The interesting number is what proportion of organisations carry cover at all — because an uninsured victim produces no claim, no data, and no entry in any of the statistics this section relies on.
This is an analysis file built on published market data, listed below. Aggregate and per-policy figures come from different sources with different scopes. Corrections: corrections@forensicpost.com.