A new cyber risk study report is warning that cyberattacks resulting in reputational damage can reduce shareholder value by an average of 27%. The findings of the 2025 Cyber Risk Report, conducted by the Aon, highlight the growing financial consequences of cyber threats and the urgent need for businesses to approach cyber risk as a core strategic issue.
The report analyzed more than 1,400 cyber incidents worldwide, identifying 56 as “reputation risk events”—attacks that garnered widespread media attention and led to sharp declines in share price. These cases, according to Aon, inflicted an average loss of more than a quarter of market value on the affected companies.
Notably, ransomware and malware attacks were the leading culprits behind these damaging events. While such attacks made up just 45% of the total incidents studied, they accounted for 60% of all reputation-linked crises, underscoring the heightened exposure these forms of cybercrime create.
“Cyber risk is no longer just a technology issue — it’s a boardroom issue,” said Brent Rieth, global cyber leader at Aon. “Our research makes clear that companies with strong preparation, rapid response, and transparent communication are significantly better positioned to minimize both reputational and financial fallout.”
The report also points to a growing challenge: reputational harm is largely uninsurable. Unlike operational losses that may be partially offset through cyber insurance, reputational damage remains a critical vulnerability. Aon identified five essential drivers that support value recovery: preparedness, decisive leadership, swift action, clear communication, and visible organizational change.
The findings are based on Aon’s proprietary Cyber Quotient Evaluation platform, a global tool used to assess cyber exposure and improve insurability through data-driven insights.
With operations in more than 120 countries, Aon continues to advise organizations on the interconnected challenges of cyber risk, insurance strategy, and enterprise resilience. The 2025 Cyber Risk Report adds to the growing evidence that the cost of inaction in the face of evolving cyber threats is rising—and reputational damage may be the most enduring consequence of all.
Bd-pratidin English/Jisan
