The Changing Landscape of Cyber Risk: An Empirical Analysis of Loss Severity and Tail Dynamics

This paper analyzes cyber risk severity and tail risk using three databases. Malicious cyber incidents show increased severity since 2018, while negligent incidents decline. Cyber loss distributions are extremely heavy‑tailed. Findings highlight the need for dynamic, category‑specific risk management and insurance pricing.