If cybercrime were a country, it would be the third-largest economy in the world. Munich Re projects global cybercrime costs will reach $14 trillion by 2028, exceeding the combined economic output of Germany, Japan, and India. The threat is not abstract, and it is not slowing down.
Here is what is also true: the cyber insurance market in 2026 is the most favorable for buyers it has been since the hard market peak of 2021. Rates are flat to declining across most commercial sectors. Carriers are competing for business. Coverage terms have expanded. The window will not stay open indefinitely.
That combination, an intensifying threat environment and a buyer-friendly market, creates a specific opportunity that most small and mid-size businesses are not actively taking advantage of.
Why the Current Market Window Matters
Cyber insurance pricing surged in 2020 and 2021 as ransomware attacks grew in frequency and severity. Carriers tightened terms, imposed sublimits, and raised rates sharply. Since 2022, competitive dynamics have prevailed, driving year-over-year rate reductions. According to a 2026 cyber market outlook report, that softening continued through 2025 and into 2026, with widespread opportunities for premium reductions and expanded coverage options across the broader market.
The practical implication: businesses that are underinsured, carrying outdated policy terms, or have never had a formal cyber coverage review can address those gaps right now at a cost that would have been significantly higher three or four years ago.
Early indicators in 2026 suggest the rate of market softening is decelerating. Ransomware losses, AI-enabled attacks, and systemic events could accelerate a return to harder conditions faster than most buyers expect. The businesses that act now lock in competitive terms. Those that wait may face the same renewal conversation at a different price.

What Ransomware and AI Are Doing to the Risk Landscape
The threat landscape has not softened alongside the market. Ransomware remains the dominant driver of cyber losses. According to Allianz Commercial’s 2025 cyber security resilience data, ransomware accounted for approximately 60 percent of the value of large cyber insurance claims. The FBI’s Internet Crime Complaint Center logged more than 193,000 phishing and spoofing complaints in 2024, with wire fraud losses exceeding $109 million.
AI is adding a new dimension. Artificial intelligence allows bad actors to automate processes that were previously manual — identifying vulnerabilities, personalizing phishing campaigns, and deploying attacks at scale with speed and precision that older security controls were not designed to handle. AI-generated deepfakes are now being weaponized in phishing campaigns, creating synthetic attacks that are exponentially more difficult to detect. Supply chain attacks, where a compromise at a vendor or software provider cascades to hundreds of clients, represent a systemic exposure that most individual business cyber policies address imperfectly.
What Good Cyber Coverage Looks Like in 2026
A cyber policy that was adequate in 2022 may have meaningful gaps today. Limits adequacy is the most common gap. Many businesses carry $1 million in cyber coverage and assume that is sufficient. Given average ransomware demands, business interruption costs, regulatory notification expenses, and breach response costs for even a mid-size incident, that limit can be consumed before litigation costs are factored in. Business email compromise coverage should be explicit in the policy. Vendor and supply chain coverage is an emerging requirement for businesses reliant on third-party technology providers. Reviewing your commercial insurance program specifically for cyber gaps, including what your general liability and property policies do and do not cover for cyber events, is the right starting point. Most standard commercial policies contain cyber exclusions that leave businesses with no coverage at all for a significant incident.
Ready to make sure your cyber coverage reflects the threat environment of 2026? The team at Tooher-Ferraris has been helping businesses navigate complex insurance decisions since 1932. Contact us today to schedule a no-obligation consultation.





