![\"resilience-logo\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/08\/resilience-logo-300x188.jpg\"){kind=logo}
The findings, published in Resilience\u2019s 2026 Midyear Cyber Risk Report, are based on insurance claims data from the company\u2019s portfolio and intelligence gathered by its Risk Operations Center (ROC).<\/p>\nResilience, a cyber risk solutions company helping organisations identify, manage and reduce cyber threats, has released new analysis indicating that artificial intelligence is currently being used primarily to enhance established attack techniques rather than enable widespread new categories of autonomous cyber attacks.<\/p>\n
The findings, published in Resilience\u2019s 2026 Midyear Cyber Risk Report, are based on insurance claims data from the company\u2019s portfolio and intelligence gathered by its Risk Operations Center (ROC).<\/p>\n
Resilience reported that it recorded no incurred losses linked to AI-specific attack methods, including prompt injection, model exploitation, or agentic AI misuse, during the first six months of 2026.<\/p>\n
Instead, Resilience found that traditional cyber risks continued to account for the majority of financial losses. During the same period, 85.3% of incurred losses across Resilience\u2019s portfolio were connected to incidents involving human error, with phishing, social engineering, or transfer fraud identified as the initial point of compromise.<\/p>\n
Resilience said this represents a notable change from the first half of 2024, when these types of attacks accounted for 17.7% of incurred losses. The company\u2019s analysis suggests that AI is currently increasing the effectiveness and scale of existing attack methods rather than creating a separate category of AI-driven insured losses.<\/p>\n
Resilience\u2019s report found that phishing and social engineering were increasingly common routes used by attackers to gain access. The company also reported that ransomware-related extortion remained the largest contributor to financial losses, accounting for 73% of incurred losses. Resilience said the figures indicate that attackers are using multiple approaches to achieve the same objective: causing significant disruption or obtaining financial payments.<\/p>\n
Despite representing the majority of incurred losses, ransomware accounted for only 5.8% of all claims recorded by Resilience. The company said this demonstrates that ransomware incidents are less frequent but can have a substantial financial impact when successful.<\/p>\n
Resilience also highlighted that the use of immutable backups increased from 79.9% to 85.2% year-on-year, which may be contributing to improved recovery capabilities and fewer ransomware-related claims.<\/p>\n
Resilience\u2019s review of other causes of loss found that vendor-related incidents accounted for 2.3% of incurred losses, down from 33.5% during the first half of 2025. While the company noted that third-party disruptions remain a significant operational concern, its claims data suggests these events are not consistently resulting in the same scale of insured financial impact associated with major third-party breaches in previous years.<\/p>\n
As AI continues to improve the efficiency and sophistication of established attack techniques, Resilience said organisations should focus on reducing the potential financial consequences of security failures. The company recommends adapting phishing exercises to reflect AI-enabled deception, introducing additional verification measures for sensitive transactions, monitoring compromised credentials on an ongoing basis, and maintaining robust third-party risk management processes.<\/p>\n
\u201cAI is rapidly reshaping cyber risk, as recent headlines have shown. But insurance claims help us understand where that risk is actually translating into financial loss,\u201d commented Vishaal \u201cV8\u201d Hariprasad, Co-Founder and CEO of Resilience.<\/p>\n
\u201cOur data shows that AI is already contributing to financial losses by making familiar attack methods, like phishing and social engineering, more effective than ever. While we haven\u2019t yet seen AI-native attacks emerge as their own driver of insured loss, that could of course change at any moment. As such, the organisations best prepared for the future will be the ones that treat AI as part of a broader, risk-first strategy\u2014strengthening the controls that limit the impact of today\u2019s attacks while preparing for tomorrow\u2019s.\u201d<\/p>\n
\u201cYou can\u2019t train your way out of every AI-generated phishing email or rely on human judgement when attacks themselves become entirely AI-generated,\u201d added Judson Dressler, Head of Resilience\u2019s Risk Operations Center.<\/p>\n
\u201cWhether an attack starts with an AI agent or a regular person, what matters most is how quickly an incident is contained once it\u2019s underway. The organisations that avoid the worst financial outcomes detect threats quickly, build layered controls, verify high-risk transactions, and limit the fallout of attacks before they can become material losses.\u201d<\/p>\n
![\"Print](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/04\/printfriendly-pdf-button-nobg-md.png\")