People searching for a "2027 catastrophe" mostly find unsourced videos. The credible institutions that study systemic risk publish something quite different: ranked surveys, loss scenarios with stated probabilities, and annual incident counts. None of them names a 2027 event.
This post reports what four of them actually say, using the documents themselves.
World Economic Forum Global Risks Report 2026
The 21st edition, published in January 2026, draws on a Global Risks Perception Survey of over 1,300 experts (1,302 respondents in the current risk question). Findings we read in the report:
- 50% of respondents expect a turbulent or stormy outlook over the next two years, rising to 57% over ten years. Only 1% expect a calm outlook in either window.
- Asked which risk is most likely to trigger a material global crisis in 2026, 18% chose geoeconomic confrontation and 14% state based armed conflict. Cyber insecurity was chosen by 3%.
- On expected severity over two years, geoeconomic confrontation ranks first, misinformation and disinformation second, and cyber insecurity sixth. Over ten years cyber insecurity ranks eighth.
This is a perception survey, so it records expert opinion, not measured probability. The report calls uncertainty "the defining theme."
Lloyd's and the Cambridge Centre for Risk Studies
In October 2023 Lloyd's and the Cambridge Centre for Risk Studies published nine hypothetical systemic scenarios across 107 countries, each at three severity levels. The featured one is an attack on a major financial payments system, with a modelled five year global economic loss of $3.5 trillion. The reported range ran from $2.2 trillion to $16 trillion across severities.
The coverage we reviewed gives probabilities of 3.32%, 0.50% and 0.12% for the major, severe and extreme levels, described as roughly 1 in 30, 1 in 200 and 1 in 1,000 year events. Lloyd's said insurance would cover only a small portion of such losses. These are scenario exercises, not predictions.
NCSC Annual Review 2025
For 1 September 2024 to 31 August 2025 the UK National Cyber Security Centre handled 429 incidents needing its support, triaged from 1,727 tips. Of these, 204 were nationally significant (48%) and 18 were highly significant (4%). These are counts of what happened, not forecasts.
ENISA Threat Landscape 2025
ENISA published its report on 1 October 2025, covering 1 July 2024 to 30 June 2025 and analysing 4,875 incidents. Version 1.3 was revised on 22 September 2026 to correct typographical and design errors. ENISA describes threat groups reusing tools, introducing new attack models and exploiting vulnerabilities.
What to do now
- Treat rankings as inputs to your own risk register, not as dates.
- Pick the two risks most relevant to you (supply disruption and cyber incidents are common) and write a scenario for each.
- Record impact in days of downtime, since that is what you can test.
- Revisit the register each quarter.
Why it matters
The honest summary is a world with elevated, interlinked risk and no known date. Planning for a week without a key supplier covers many different bad days.
Try it yourself
Open the risk register walkthrough and add one scenario from this post with a likelihood, an impact and an owner.
Click through it at your own pace, or open it full screen.
Quick check
Does the WEF report predict a 2027 catastrophe?
No. It reports expert survey rankings for 2026, a two year horizon and a ten year horizon, and stresses uncertainty.
What is the Lloyd's $3.5 trillion figure?
A modelled five year global loss for one hypothetical payments system attack scenario, not a forecast.
