2025 Regulatory Summit

Internal Use Only

Cybersecurity Supervision

Internal Use Only

Current Threat Environment

Ransomware remains the most visible , active, and dangerous threat The threat of cyberattacks remains enhanced by current geopolitical climate

• According to the 2025 Verizon Data Breach Report , ransomware attacks increased 37% from the previous report • 64% of reporting victims did not pay ransoms; median ransom amounts paid to threat actors also decreased from $150,000 to $115,000 • Small to medium sized businesses (SMBs) were "disproportionately affected"; ransomware was present in 88% of data breaches involving SMBs, compared to 39% in larger organizations

• State-sponsored and politically motivated attacks against the US and Western allies • Conflicts between Russia and Ukraine, Israel and Hamas, and ongoing tensions with China, Iran, and North Korea • Financially-motivated attacks from foreign actors (i.e, North Korean attack on Bybit; largest crypto theft in history of digital assets)