More than two-fifths of UK businesses experienced a cyber breach or attack in the past year, according to the latest government findings.
The Cyber Security Breaches Survey shows that 43% of businesses reported at least one incident in 2025/26 — unchanged from the previous year — equating to around 612,000 firms affected.
Phishing remains the most common threat, impacting 38% of businesses, highlighting the continued reliance of attackers on email-based scams.
While the figure is steady year-on-year, it marks an improvement from 2023/24, when 50% of businesses reported breaches or attacks.
The UK government has warned that the risk landscape is becoming more complex, with artificial intelligence increasing both the scale and sophistication of cyber threats. Ministers have urged business leaders to strengthen their defences, while the National Cyber Security Centre has cautioned about a potential rise in attacks linked to hostile states.
An open letter from ministers has also highlighted growing concerns around AI-driven cyber risks, signalling that cybersecurity is set to remain a critical issue for businesses across the UK.
