Insurancebusinessmag US Cybercrime Losses Surge to $21 Billion Amid Coverage Gaps
Article Content
- •US cybercrime losses reached $21 billion in 2025, a 26% increase from 2024.
- •Only 10-20% of small and midsize businesses have cyber insurance coverage.
- •AI-driven threats contributed to nearly $893 million in losses in 2025.
In 2025, US internet crime losses reached nearly $21 billion, marking a 26% increase from the previous year. This was the first time the FBI’s IC3 received over one million complaints in a single year. The increase in losses is attributed to various forms of cybercrime, including consumer fraud and investment scams. Small and midsize businesses (SMBs) are particularly vulnerable, with only 10% to 20% having cyber insurance coverage. The average claim severity for large businesses doubled to $4.4 million, despite a 34% drop in claim frequency. AI-driven threats are reshaping the risk landscape, with nearly $893 million in losses linked to AI-enabled incidents in 2025. The gap in cyber insurance coverage among SMBs is largely due to limited access to appropriate products and a tendency to underestimate exposure. The situation highlights the urgent need for better protection and awareness among smaller organizations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What types of cybercrime contributed to the losses?
How does AI impact cybercrime?
What is the coverage gap for SMBs?
Continue Reading
AI-Enabled Financial Fraud on the Rise: Experts Warn of New Threats Frank Abagnale, a former con artist, warns that AI is facilitating financial fraud, making scams more convincing and widespread. He emphasizes the need for individuals to verify identities before sharing personal information. AI tools allow scammers to create fake communications rapidly, increasing the scale of fraud…
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…