72% of Companies Report Incomplete Recovery After Cybersecurity Incidents

A review of 80 cybersecurity incident disclosures from SEC filings found that approximately 72% of companies reported significant operational disruption or incomplete recovery. Around 50% of incidents involved data theft or exposure, while financial services was the most affected sector. Only about 18% of disclosures explicitly mentioned cyber insurance.