Reputation-related cyber incidents can reduce shareholder value by an average of 27%, according to Aon’s 2025 Global Cyber Risk Report.
The study analyzed more than 1,400 global cyber events and identified 56 that escalated into reputation risk events—defined as incidents that triggered significant media attention and measurable share price declines.
Malware and ransomware attacks were identified as the most damaging, representing 60% of all reputation-driven events, despite accounting for only 45% of total cyber incidents.
Aon outlined five critical factors supporting value recovery following a reputation-impacting event: preparedness, leadership, rapid response, clear communication, and strategic change.
The report emphasized that while cyber insurance can offset some financial exposure, reputation risk remains largely uninsurable, highlighting the importance of proactive management and crisis readiness.
The findings reinforce the broader shift in cyber risk oversight from IT departments to corporate leadership.
Brent Rieth, global cyber leader at Aon, noted that cyber risk has become a board-level issue, and companies that focus on resilience and data-driven decision-making are better positioned to withstand reputational and financial consequences.
Our latest research underscores the importance of proactive risk mitigation. Organizations that invest in preparedness and resilience are far better positioned to avoid the reputational and financial fallout that can follow a cyber event.
Brent Rieth, global cyber leader at Aon
Aon stated that growing threat complexity requires companies to improve their visibility into cyber exposures and ensure better alignment between cybersecurity efforts and insurance strategy.
“As cyber threats grow more complex and interconnected, companies need a clearer view of their exposure, stronger alignment between cybersecurity and insurance strategies, and the tools to make better, data-driven decisions. Aon is uniquely positioned to support clients through these challenges.”
