Swiss Re Cyber Market Report 2026: AI Amplifies Risks as Rates Drop 5%

Swiss Re’s latest annual cyber report, "Building a sustainable cyber market in the AI era", explores how the cyber insurance market has continued to grow at a single-digit pace even as AI, ransomware and increasing digital dependency rapidly reshape the underlying risk landscape.

AI is emerging as a defining cyber risk factor

Swiss Re’s analysis suggests that AI is currently reshaping existing cyber risks rather than creating entirely new categories of insured loss. Threat actors can use AI to accelerate vulnerability identification, automated attacks and next-generation phishing, while businesses can deploy it to improve threat detection, incident response and cyber resilience.

"AI is not creating an entirely new cyber risk landscape but it is amplifying the risks we already know. AI-related cyber claims remain limited today, but clarity over how existing cyber policies respond will become increasingly important as exposures evolve. In this environment, insurers and reinsurers will need to proactively monitor emerging exposures and loss trends, and ensure pricing reflects the risk being assumed." said Fabian Willi, Head Cyber Key Accounts at Swiss Re.

Cyber growth remains steady in single-digit range, with potential for new growth avenues

Swiss Re data also finds that competitive pressure continues to weigh on pricing. Global cyber rates have now fallen for four consecutive years. While US pricing is showing signs of stabilisation as carriers respond to profitability pressure, competition remains stronger in Europe.

The new report highlights two major growth opportunities: closing the protection gap of uninsured companies and addressing underinsurance of existing insurance buyers.

At the smaller end of the market, micro-SMEs and SMEs remain largely uninsured, despite representing USD 4.9bn of estimated premium in 2026. In the mid-market, growth can come from both new buyers and higher limits.

For large corporates, the issue is increasingly whether existing protection is sufficient. Severe cyber losses can materially exceed typical limits, particularly where ransomware or data breaches lead to prolonged business interruption, restoration costs, supply-chain disruption and lost revenue. Swiss Re says a doubling of current average limits may be needed in some cases, depending on a company’s activities, geography and risk profile.

"The cyber protection gap is not only about getting more companies insured; it is increasingly about whether the protection already being bought is enough for the losses businesses actually need insurance to absorb. For large corporates, our data shows that an average of ten losses a year over the past five years would have exceeded the average policy limit of USD 120 million. As digital dependency increases and AI potentially expands the attack surface, that question of limit adequacy becomes even more important." said Dani Tobler, Head Cyber at Swiss Re.

Building a sustainable cyber insurance market

Swiss Re's message for the market is clear: cyber demand is likely to keep growing as digital dependency increases, but sustainable expansion will require clearer understanding of AI-related exposures and pricing and limits that continue to reflect the risk being assumed. Reinsurance will remain important in helping carriers manage volatility and accumulation as portfolios and insured limits grow.