Cyber Threats Remain a Top Business Concern in Travelers Risk Index

John Menefee, Vice President and Enterprise Cyber Lead at Travelers, emphasized the significance of these findings, stating, “These findings provide a compelling snapshot of how people and companies view cyber threats and what they’re doing, if anything, to avoid becoming the next victim of a cyberattack.” Menefee further underscored the importance of proactive cybersecurity measures, suggesting that effective awareness and implementation of robust cybersecurity programs can distinguish successful businesses from those that suffer catastrophic breaches.

The annual Travelers Risk Index surveyed over 1,200 business decision-makers across the nation, touching on a variety of cyber-related topics. Participants were queried about their experiences with cyberattacks, the measures they have taken to mitigate vulnerabilities, and their engagement with cyber insurance policies. The survey included a diverse array of businesses, spanning various sectors and sizes.

While cyber risks were deemed the top concern for medium- and large-sized enterprises, they ranked third overall when considering businesses of all sizes. The primary concerns identified were:

Interestingly, the top cyber-related concern highlighted by respondents was the threat of a security breach or hacking incident.

A noteworthy trend from this year’s survey was the decrease in perceived risk among respondents. Only 40% of participants believe that the business environment is becoming increasingly risky, down from 51% the previous year. Among those concerned about cyber threats, the percentage has also dipped; 56% expressed substantial worry, a decline from 62% in 2024 and the lowest level since 2020. Furthermore, only 62% of large company representatives believed that a cyberattack was an inevitability, a decrease from 70% last year.

Despite the ongoing concerns surrounding cyber threats, more than 20% of respondents admitted their companies had not adopted basic protective measures. These included:

Lauren Winchester, Vice President of Cyber Risk Services at Travelers, cautioned against complacency: “Companies need to stay vigilant and not take their eye off the ball, because the key to successful cyber mitigation is staying ahead of it. The worst thing a business can do is to become complacent. Don’t stop investing, because the bad actors aren’t stopping.”

The survey results reveal a concerning trend: for the ninth time in the past ten years, the percentage of respondents reporting cyber events has increased. This year, 25% indicated they had experienced a data breach or cyber incident, up from 24% in 2024.

In an effort to combat these escalating cyber threats, the Travelers Institute, the public policy division of Travelers, is organizing a series of events focused on cyber preparedness. The *Cyber: Prepare, Prevent, Mitigate, Restore* symposium will take place in Tulsa, Oklahoma, on October 20. Additionally, a free public webinar featuring Jeff Greene, former cyber leader at the White House and CISA, will be held on October 8, offering valuable insights into cyber readiness.

The findings of the 2025 Travelers Risk Index underscore the ongoing concerns surrounding cyber threats in the business landscape. While there is a slight decline in the perception of risk, the increasing incidence of cyber events highlights the critical need for businesses to maintain vigilance and invest in robust cybersecurity measures. As the landscape of cyber threats continues to evolve, proactive engagement in risk mitigation strategies will be crucial for businesses aiming to safeguard their operations and data.