--- title: Cyber Security in Insurance | Free Report | TSC description: Learn why insurers are a high-value cyber target and how to protect sensitive policyholder data. Free TSC report. image: https://thesecuritycompany.com/hubfs/cyber-security-in-the-insurance-industry-report.webp --- [Skip to content](https://thesecuritycompany.com/blog/cyber-security-insurance-industry-report#main-content) [![TSC Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=95&height=78&name=TSC%20Logo%20large.png)](https://thesecuritycompany.com/) - [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) - [Products & Services](https://thesecuritycompany.com/productsandservices) - [Success Stories](https://thesecuritycompany.com/success-stories) - [Resources](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) [Book a demo](https://thesecuritycompany.com/contact-us) ![Search icon](https://5018647.fs1.hubspotusercontent-na1.net/hubfs/5018647/Design/Icons/Font%20Awesome/search.svg) [Book a demo](https://thesecuritycompany.com/contact-us) [All posts](https://thesecuritycompany.com/blog/all) July 22, 2026 # Cyber security in the insurance sector   The Security Company  ·  2 minute read ![Person signing an insurance document, representing cyber security risks, sensitive data protection and data breach prevention in the insurance sector.](https://thesecuritycompany.com/hs-fs/hubfs/cyber-security-in-the-insurance-industry-report.webp?width=1920&height=1080&name=cyber-security-in-the-insurance-industry-report.webp) Explore why cyber security in the insurance sector is critical for protecting sensitive customer data, reducing ransomware risk and preventing human error from becoming a breach. ## The most targeted sector. Is your insurance data safe? Money is not the only thing drawing attackers to insurance. It is data. Insurance companies hold vast amounts of sensitive and personally identifiable information, making the sector a high-value target for cybercriminals. According to the report, the insurance industry was the most targeted sector by cyber attacks in Q1 2023, while over a quarter of attackers in 2022 were motivated by financial gain. Rapid digital transformation has widened the attack surface across the insurance sector, creating new opportunities for ransomware, data theft, phishing, weak password attacks, misconfigured web servers and unpatched devices. In 2021, CNA Financial reportedly paid a $40 million ransom after an attack exposed sensitive employee and customer data, while attackers in another case spent four months inside an insurer's systems stealing data before deploying ransomware. With the typical cost of a data breach for a financial services organisation reaching $5.97 million, this report explains the threats facing insurers and why human error, staff awareness and behaviour change remain central to reducing cyber risk. **In this report, you'll discover:** Why the insurance industry is one of the most targeted sector How rapid digital transformation has widened the attack surface Why the sensitive data insurers hold is so valuable to criminals How ransomware and Ransomware-as-a-Service threaten the industry Real-world attacks, including the $40 million CNA Financial breach How data theft has become as important to attackers as extortion The growing role of AI in powering future ransomware attacks Why human error remains a leading cause of insurance data breaches --- ### Reduce cyber risk across your insurance workforce TSC helps insurance organisations strengthen security awareness and reduce human error risk through practical training focused on phishing, ransomware, data protection, password security, misconfiguration, unpatched devices and the everyday behaviours attackers exploit. [View the report](https://thesecuritycompany.com/hubfs/TSC-Insurance-Cyber-Security.pdf) [Book an eLearning demo](https://thesecuritycompany.com/contact-us) --- ## Insurance cyber security FAQ ### Why is the insurance sector targeted by cybercriminals? The insurance sector is targeted because it holds large volumes of sensitive customer data, personally identifiable information, financial records, medical details and policy information. This data can be used for fraud, identity theft, extortion, ransomware and resale on criminal marketplaces. ### What are the biggest cyber security risks for insurance companies? Key insurance cyber security risks include ransomware, Ransomware-as-a-Service, data theft, phishing, weak passwords, misconfigured web servers, unpatched devices, digital transformation risk and human error that leads to accidental data exposure. ### How can insurance organisations reduce data breach risk? Insurance organisations can reduce data breach risk by improving staff cyber security awareness, training employees to spot phishing, strengthening password and MFA controls, patching devices, securing web servers, protecting sensitive customer data and building a security culture that reduces human error. --- ## Related pages [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) [Products & Services](https://thesecuritycompany.com/productsandservices) ## Related posts [![Maritime worker using a laptop on a vessel, representing cyber security risks, connected ship systems and secure working at sea.](https://thesecuritycompany.com/hubfs/cyber-security-in-the-maritime-industry-report.webp)](https://thesecuritycompany.com/blog/cyber-security-maritime-industry-report) [REPORT](https://thesecuritycompany.com/blog/tag/report) ### [Cyber security in the maritime industry](https://thesecuritycompany.com/blog/cyber-security-maritime-industry-report) [![](https://thesecuritycompany.com/hubfs/Stolen%20data.webp)](https://thesecuritycompany.com/blog/what-happens-to-your-data-when-it-has-been-stolen) [ARTICLE](https://thesecuritycompany.com/blog/tag/article) ### [What happens to your data when it has been stolen](https://thesecuritycompany.com/blog/what-happens-to-your-data-when-it-has-been-stolen) [![](https://thesecuritycompany.com/hubfs/What%20is%20phishing-1.webp)](https://thesecuritycompany.com/blog/phishing-what-is-it-how-to-spot-it-and-what-to-do-about-it) [ARTICLE](https://thesecuritycompany.com/blog/tag/article) ### [Phishing: What is it? How to spot it? And what to do about it?](https://thesecuritycompany.com/blog/phishing-what-is-it-how-to-spot-it-and-what-to-do-about-it) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug.webp?width=80&height=80&name=bug.webp) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug_white.webp?width=80&height=80&name=bug_white.webp) Go further with emerging threat intelligence, expert analysis and guidance [![TSC White Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20White%20Logo%20large.webp?width=100&height=82&name=TSC%20White%20Logo%20large.webp "TSC White Logo large")](https://thesecuritycompany.com/) **©** The Security Company (International) Limited 2026 Office One, 1 Coldbath Square, London, EC1R 5HL, UK Company registration No: 03703393 VAT No: 385 8337 51 [linkedin-in icon](https://uk.linkedin.com/company/thesecurityco) [Home](https://thesecuritycompany.com) [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) **[Products & Services](https://thesecuritycompany.com/productsandservices)** [Contact us](https://thesecuritycompany.com/contact-us) [Privacy &](https://thesecuritycompany.com/tsc-policies)[Cookie Policies](https://thesecuritycompany.com/tsc-policies) [Terms & Conditions](https://thesecuritycompany.com/tsc-policies) **Resources** - [eBooks](https://thesecuritycompany.com/our-resources) - [Reports & Whitepapers](https://thesecuritycompany.com/our-resources) - [Cyber Security Calendar](https://thesecuritycompany.com/blog/security-awareness-calendar) - [Webinars](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) Copyright © 2026, The Security Company Ltd ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The Security Company", "url" : "https://thesecuritycompany.com/blog/author/the-security-company" }, "dateModified" : "2026-07-23T10:34:10.612Z", "datePublished" : "2026-07-22T16:37:30.000Z", "headline" : "Cyber Security in Insurance | Free Report | TSC", "image" : [ "https://thesecuritycompany.com/hubfs/cyber-security-in-the-insurance-industry-report.webp" ], "mainEntityOfPage" : { "@id" : "https://thesecuritycompany.com/blog/cyber-security-insurance-industry-report", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://thesecuritycompany.com/hubfs/TSC%20Logo%20large.png" }, "name" : "The Security Company" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#organization", "@type" : "Organization", "description" : "Cyber security awareness training and human risk management for businesses of every size.", "logo" : "https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=190&height=156&name=TSC%20Logo%20large.png", "name" : "The Security Company", "sameAs" : [ "https://www.linkedin.com/company/thesecurityco/", "https://www.youtube.com/@thesecurityco", "https://vimeo.com/user31176192", "https://thecpdregister.com/providers/cpd-group-providers--790118", "https://ico.org.uk/ESDWebPages/Entry/Z4812822", "https://find-and-update.company-information.service.gov.uk/company/03703393", "https://registry.blockmarktech.com/certificates/19d457f5-bf79-4f85-8f6e-dd2db181ff76/", "https://www.gartner.com/reviews/product/the-security-company-security-awareness-training" ], "url" : "https://thesecuritycompany.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#website", "@type" : "WebSite", "name" : "The Security Company", "publisher" : { "@id" : "https://thesecuritycompany.com/#organization" }, "url" : "https://thesecuritycompany.com/" } ```