Crisis communications, cyber, cybersecurity, Dave Smolensky, preparation, playbook, Tabletop exercise, public relations

Cyber Incidents in 2025

A Nationwide Reality and a Growing Focus on Preparation

Cyber incidents continued to affect organizations across the country. Over the course of 2025, Resolute Strategic Services supported the crisis communications response for cyber incidents in 37 states, working alongside data privacy attorneys, forensic firms, incident response teams and cyber insurers.

The geographic spread in the map underscores an important reality that cyber incidents are not isolated to any one region. From ransomware and data exfiltration to business e-mail compromise and third-party exposures, organizations continue to face complex, high-pressure situations requiring coordinated decision-making and clear communications.

At the same time, 2025 also brought an encouraging shift.

In addition to responding to active incidents, we saw a increase in organizations reaching out before something happens, seeking to strengthen their preparedness from a crisis communications perspective.

These conversations focused on practical questions, including:

  • Who needs to be involved early?
  • What elements should be included in a crisis communications playbook?
  • What decisions must be made before facts are complete?
  • How do legal, technical and communications teams stay aligned?
  • How do leaders communicate with confidence while an investigation is still unfolding?
  • What factors should be considered before moving forward with communications activities?

Organizations that invest time in planning, by developing communications playbooks, clarifying roles, pressure-testing scenarios and aligning leaders are better positioned to respond calmly, protect trust, and avoid compounding an already difficult situation with missteps or delays.

The map highlights where incidents occurred. The preparation work happening behind the scenes, often quietly and proactively, is just as important. Seeing more organizations prioritize readiness before they are under pressure is a positive trend and one we expect to continue.

As cyber risks evolve, preparation remains one of the most effective tools organizations have to navigate uncertainty with clarity and confidence.