The cyber re/insurance market is grappling with a widening contradiction: risk is escalating, but capital is flooding in faster, according to a white paper from Gallagher Re that frames cyber tail exposures as comparable in volatility to traditional property catastrophe risk.
The global cyber insurance market has roughly doubled from $8 billion in gross written premiums in 2020 to approximately $16 billion at present, though that remains a fraction of the estimated $450–$500 billion in total property GWP.
Ian Newman (pictured above), global head of cyber at Gallagher Re, said: "As the cyber insurance market continues to grow, insurers are facing increasing challenges in managing their exposure to extreme tail risks.
Demand for excess-of-loss tail protection has been climbing – the January 1, 2026 renewal recorded the market's first-ever purchase of a $1 billion cyber XL tower.
Yet that same renewal window saw cyber reinsurance pricing fall 32%, the steepest single-period decline on record, per Gallagher Re's Cyber Risk Adjusted Rating Index.
The drop was driven largely by surplus capacity. Guy Carpenter's January 2026 renewal report noted that reinsurers had grown capital on the back of strong retained earnings, allowing clients to secure lower prices.
Howden Re's Luke Foord-Kelcey characterized the environment as one where "plentiful capacity and strong reinsurer appetite" remain firmly to cedants' advantage. Favorable loss experience reinforced the trend – ransom payment rates fell to under 32% in 2025, Royal Gazette data showed, with average payouts declining 10%.
Gallagher Re projects total XL limit demand will nearly double to $9 billion annually by 2030, driven by a structural shift from quota-share to XL arrangements and a 70% rise in retained probable maximum losses. The broker added that primary cyber insurance rates are expected to continue softening through 2026.
The white paper's central thesis is that bundling cyber tail risk with uncorrelated property catastrophe exposures in shared-limit structures can reduce pricing by roughly 25%. In one scenario, standalone covers costing $20 million combined would fall to $15 million under a multi-class structure.
Those savings matter against a vast protection gap. Munich Re research has estimated that global cyber premiums, while growing, leave the overwhelming majority of cyber risk uninsured.
This point was underscored in 2024 when the CrowdStrike outage cost Fortune 500 firms about $5.4 billion, per Parametrix estimates, while insured losses reached only $300 million to $1.5 billion. A Geneva Association study has pegged the cyber protection gap at approximately 90%.
Gallagher Re identified the insurance-linked securities market – with $128 billion in assets under management as of December 2025 – as a complementary channel, noting it can now structure cyber cat bond tranches of up to $500 million at pricing approaching parity with traditional re/insurance.
