At first glance, the UK’s latest cybersecurity figures appear reassuring. In 2025, 43% of businesses and 30% of charities reported experiencing a cybersecurity breach or attack in the previous 12 months. In real terms, that amounts to around 612,000 UK businesses and 61,000 charities identifying an incident during the year. This represents a decrease in prevalence among businesses compared to 2024 when 50% of businesses reported a breach or attack, equivalent to roughly 718,000 businesses.
But