The Cyber Security Breaches Survey is a study of UK businesses, charities and education institutions. It was carried out in winter 2020/21
In the survey, micro business means 1-9 employees, small is 10-49, medium is 50–249 and large is 250 upwards.
On average, 39% of businesses and 26% of charities report having cyber security breaches or attacks in the last 12 months. The figures are higher in medium and large organisations as they are more often targeted by criminals.
However, evidence from the study suggests that the risk level is potentially higher than ever under COVID-19, and that businesses are finding it harder to administer cyber security measures during the pandemic.
Key Points For Business That Have Identified Breaches or Attacks
- 27% of these businesses and 23% of these charities experience such attacks at least once a week. The most common by far are phishing attacks (83% and 79% respectively), followed by impersonation (27% and 23%).
- A sizeable number of these organisations report that costs are substantial.
- 21% and 18% respectively of businesses and charities end up losing money, data or other assets.
- 35% of businesses and 40% of charities report being negatively impacted e.g. because they require new post-breach measures, have staff time diverted or suffer wider business disruption.
- The mean cost of all the cyber security breaches these businesses have experienced in the past 12 months is estimated to be £8,460. For medium and large firms combined, this average cost is £13,400.
77% of businesses say cyber security is a high priority for their directors or senior managers, while 68% of charities say this of their trustees.
If you have any experiences with these scams do let me know, by email.
