Cyber risk is no longer just a technology issue — it's a boardroom issue, according to Brent Rieth, global cyber leader at Aon. “Organizations that invest in preparedness and resilience are far better positioned to avoid the reputational and financial fallout that can follow a cyber event", said Brent Rieth.
Aon’s latest research underscores the importance of proactive risk mitigation. The 2025 Cyber Risk Report reveals that cyber events that cause reputation risks can result in an average of 27% drop in shareholder value, highlighting the growing financial and reputational stakes of cyber risk.
According to the company’s press release, this year’s report analyzes more than 1,400 global cyber events while identifying which types of attacks are most likely to evolve into reputation risk events and which can be the most damaging when they do.
Among the report's key findings:
- Of the 1,414 cyber events analyzed, 56 developed into reputation risk events, which are defined as cyber incidents that attract significant media attention and lead to a measurable decline in share price.
- Companies affected by these reputation risk events experienced an average shareholder value decline of 27%.
- Malware and Ransomware attacks were the most likely to trigger reputational damage, accounting for 60% of all reputation risk events, despite making up only 45% of total cyber incidents.
- Five drivers of value recovery — preparedness, leadership, swift action, communication and change — were identified as critical levers for mitigating reputational fallout.
"As cyber threats grow more complex and interconnected, companies need a clearer view of their exposure, stronger alignment between cybersecurity and insurance strategies, and the tools to make better, data-driven decisions. Aon is uniquely positioned to support clients through these challenges", commented Brent Rieth.
