What are some large cyber claims that recently paid out?
The first distinction is important: Company cyber loss ≠ insurance claim ≠ insurance payout Many of the largest cyber events produce headlines describing hundreds of millions of dollars of economic loss, while the actual insurance recovery may be much smaller or remain confidential. There are, however, some publicly disclosed examples.
Marks & Spencer — £100 million insurance recovery
M&S suffered a major cyberattack in 2025 that caused significant operational disruption.
The company later reported approximately £100 million of insurance proceeds associated with the incident, while the broader economic impact was significantly larger.
That illustrates an important point:
A cyber policy does not have to reimburse the company’s entire economic loss to provide substantial value.
That is a useful example because it shows cyber insurance doing more than simply reimbursing incident-response costs.
It can respond to:
Incident and remediation expense
plus
Business interruption
Why these examples matter
People often think:
Cyber insurance = ransom reimbursement.
That is increasingly the wrong way to look at the product.
The economically significant cyber claim may include:
- forensics
- restoration
- business interruption
- extra expense
- notification
- legal costs
- regulatory response
- litigation
- extortion
For many large cyber claims, the most significant economic consequence is not the ransom itself but the interruption and downstream business effects that follow the attack.