#United States #Cybersecurity #San Francisco #resilience #AI Threats

Increasing Cyber Losses Due to Human Error in 2026

In the ever-evolving landscape of cybersecurity, the first half of 2026 has revealed some sobering statistics regarding cyber losses. According to a recent report from Resilience, a leading cyber risk solutions company, a staggering 85% of losses stemmed from attacks that mainly exploited human error, raising urgent concerns about organizations’ preparedness against AI-driven cyber threats.

While businesses worldwide are striving to enhance their defenses against sophisticated cyber attacks, the data indicates that these losses are primarily attributed to traditional vulnerabilities such as phishing and social engineering. The distressing reality is that the majority of these incidents were not the result of new AI-native attack vectors, which have thus far shown no recorded losses in the same period. Instead, existing attack methods are being enhanced by AI, making them more potent and effective than ever.

The Rise of Traditional Vulnerabilities

Specifically, human error has emerged as a significant area of vulnerability, accounting for more than three-fourths of the incurred losses. Tactics like phishing scams and social engineering schemes have become the primary entry points for cyber criminals. To put this in perspective, in 2024, these forms of cyber crime accounted for only 17.7% of losses, illustrating a dramatic increase in their efficacy over a relatively short time.

Interestingly, extortion via ransomware has emerged as the single largest cause of financial loss, amounting to a shocking 73% of all incurred losses. This dramatic figure underscores how attackers are not just relying on traditional methods but are also capitalizing on them to orchestrate ransomware attacks, often resulting in significant business disruptions or immediate financial payouts.

Despite ransomware being the leading cause of financial harm, it accounted for only 5.8% of total claims. This disparity starkly illustrates that while ransomware incurs substantial losses, it remains relatively infrequent, thanks in part to the increasing adoption of immutable backups, which rose from 79.9% to 85.2% year over year. The proactive measures organizations are taking to protect their data are likely aiding their recovery efforts from such incidents.

Declining Vendor-Related Losses

Another notable trend is the decline in vendor-related losses, which dropped significantly to 2.3% in the first half of 2026 as compared to 33.5% the year before. While vendor disruptions continue to represent a real operational threat—as evidenced by notable outages like the Canvas platform—they do not generate losses comparable to major third-party breaches experienced in prior years.

Adapting to Increasing AI Threats

As the cybersecurity landscape shifts, the reliance on traditional security awareness programs is becoming less effective. Resilience advises organizations to not only prepare for inevitable human mistakes but also to embrace innovative approaches in their security strategies. This includes evolving phishing simulations to mirror the sophisticated deception powered by AI, instituting multi-layered verifications for high-risk transactions, and consistently monitoring for compromised credentials.

The message is clear: as AI continues to enhance and amplify existing attack methods, organizations must be proactive in their approach to cybersecurity. Simply relying on human judgment is not enough—defense mechanisms need to be robust, adaptable, and comprehensive. The organizations that prioritize rapid threat detection, layered control mechanisms, and effective transaction verification stand a better chance of mitigating the impacts of cyber attacks before they translate into significant financial losses.

As noted by Judson Dressler, Head of Resilience’s Risk Operations Center, “Whether an attack is initiated through AI or a conventional approach, the crucial factor remains how swiftly the incident is contained.” By focusing on enhancing response capabilities and employing advanced controls, businesses can navigate the complexities of today’s cyber threat landscape.

Conclusion

Resilience's ongoing efforts to map real-world cyber risks through comprehensive data illustrate the evolving nature of cyber threats and the critical importance of fortifying defenses against them. The detailed findings from their research will be instrumental as organizations strive to stay a step ahead of criminals leveraging AI technologies. To gain further insight into these trends and learn how to bolster cyber resilience, organizations can access the full report from Resilience.