QBE Survey Finds Widespread Cyber Incidents and Risk Concerns Among US Businesses

NEW YORK, NY, May 19, 2026 — QBE North America today announced the findings of a survey of U.S. businesses highlighting concern about cyber risk, exposure to cyber incidents over the past year and growing investment in cybersecurity.

“Cyber threats are a frequent and costly reality for U.S. businesses,” said Ian Walsh, Vice President and U.S. Cyber Product Leader, QBE North America, “This research underscores the importance of stronger defenses as companies navigate an evolving risk environment that includes emerging technologies.”

The survey included 400 decision makers of IT, administration or insurance in businesses with 100 to 2,000 employees in the United States. Key findings include:

• Widespread cyber incidents: Two in three U.S. businesses (67%) experienced a cyber event in the past 12 months. Among those businesses, 58% had attacks caused by or related to a supplier and the same percentage (58%) had attacks that resulted in a loss of revenue.
• Disruptive business interruptions: One in four U.S. businesses (25%) experienced a cyber event in the past 12 months that resulted in a business interruption for more than one working day.
• High concern about future threats: 77% of businesses are concerned about cyber threats they may face over the next 12 months.
• Rising investment in cybersecurity: Three in four U.S. businesses say their cybersecurity budget will increase in the coming year (46% in line with inflation and 29% beyond inflation).
• Cyber insurance coverage gaps: Only two-thirds of businesses with 100 to 2,000 employees (67%) have cyber insurance while 24% do not.
• Incident response preparedness: Eighty-one percent of businesses report having an incident response plan to address a cyber event, while 15% say they do not.

The findings suggest that while awareness of cyber risk is high and cybersecurity investment is increasing, gaps remain in response preparedness and insurance coverage.

Artificial intelligence in operations and risk
According to the survey, 81% of U.S. businesses are already using artificial intelligence (AI) in their operations and an additional 15% are looking into it. In the next two years, 92% of respondents expect AI will have a positive impact on their business (56% very good, 36% somewhat good). Among businesses already using AI in their operations, a majority are using it to increase productivity (62%) or operational efficiency (59%), or to improve decision-making (54%). Many organizations are taking steps to manage AI-related risks. Among U.S. businesses deploying AI, 60% are training staff on its safe use, and 53% are checking the quality of the data used to train models.

The survey also found that nearly three in 10 U.S. businesses (29%) experienced at least one cyber incident where AI was believed to have been used as part of the attack, with the methods most frequently used being phishing messages using AI (mentioned by 51% of businesses that suffered an AI attack), and AI-generated malware or malicious code (49%). In addition, 70% of businesses are concerned about potential risks arising from their vendors or suppliers using AI.

“Developing strong incident response plans and addressing insurance gaps are critical steps for midsize businesses seeking to protect operations and build resilience in today’s complex threat landscape,” said Walsh.

More information about QBE’s cyber products is available at qbe.com/us/cyber.

Survey Methodology
The survey was conducted by Opinium for QBE among 400 decision makers of IT, administration or insurance in businesses with 100 to 2,000 employees in the United States, between March 31 to April 17, 2026, using an email invitation and an online survey.

The broader 2026 Opinium cyber risk survey for QBE covers 15 countries (Australia, Canada, Denmark, France, Germany, Hong Kong, Italy, Netherlands, New Zealand, Singapore, Spain, Sweden, United Arab Emirates, UK, USA), with a total sample of over 6,000 businesses.

About QBE North America
QBE North America is a global insurance leader that gets to the heart of what’s at risk for customers. Part of QBE Insurance Group Limited, QBE North America reported Gross Written Premiums in 2025 of $7.7 billion. QBE Insurance Group’s results can be found at qbe.com. Headquartered in Sydney, Australia, QBE operates out of 26 countries around the globe, with a presence in every key insurance market. The North America division, headquartered in New York, conducts business primarily through its insurance company subsidiaries. The actual terms and conditions of any insurance coverage are subject to the language of the policies as issued. Additional information can be found at qbe.com/us or follow QBE North America on LinkedIn, Facebook and Instagram.

Media Contact:
Lou Casale
Media Relations
[email protected]