How Business Email Compromise Drives Cyber Claims

Key takeaways:

• Ransomware activity eases: Leak site listings declined to 1,487 incidents in Q2 2025, after reaching  2,241 incidents in Q1.
• Social Engineering Fraud and BEC continue to drive claims: When combined, these often-overlapping categories are consistently among the top three drivers of claims at Travelers. BEC exploits are evolving to include new tactics, including extortion.
• Fraudulent IT workers represent a new vector for attack: New reports and law enforcement actions revealed a remote worker scheme that has affected more than 300 U.S. companies.