UK Cybersecurity Threat Remains High as AI Amplifies Risks, Government Report Finds The UK government’s Cyber Security Breaches Survey 2025-26 reveals persistent and severe cyber threats, with 43% of businesses, 28% of charities, and 69% of large firms reporting breaches or attacks in the past year. Nearly a third (29%) of respondents faced incidents at least weekly, underscoring the ongoing challenge. The report arrives amid a surge in high-profile attacks, including breaches at Marks & Spencer, Co-op Group, and Jaguar Land Rover, as well as growing concerns over offensive AI. Cybersecurity minister Liz Lloyd warned that AI is sharpening the threat landscape, urging business leaders to prioritize defenses. In response, the government has targeted over 180 major UK companies with a call to adopt the upcoming Cyber Resilience Pledge a voluntary initiative requiring board-level accountability, enrollment in the NCSC’s free Early Warning service, and Cyber Essentials certification across supply chains. While some trends show improvement ransomware attacks dropped to 1% from 3% the prior year, and phishing incidents fell to 38% from 42% in 2023-24 phishing remains the most common and disruptive threat. Impersonation attacks also declined, affecting 12% of businesses (down from 17% in 2023-24) and fewer charities. However, the financial and reputational fallout of breaches has worsened: 5% of businesses reported revenue or share value losses (up from 2%), while reputational damage rose to 3% from 1%. The survey highlights a paradox: while defenses may be strengthening in some areas, attackers are leveraging AI to refine tactics, keeping pressure on organizations across sectors.

UK Banking Sector Faces Relentless Cyber Threats as IT Failures Disrupt Services The UK’s financial sector is grappling with escalating cybersecurity risks and frequent IT outages, with bank executives warning of the severe consequences for market stability and public trust. Speaking before the Commons Treasury Committee, HSBC UK CEO Ian Stuart emphasized that cybersecurity is "top of the agenda" for his group, describing the financial burden of defending against attacks as "enormous." HSBC alone is investing hundreds of millions of pounds to bolster its IT systems, reflecting a broader industry trend. Cybersecurity experts, including Prof Oli Buckley of Loughborough University, described attacks on financial institutions as "relentless" and "increasingly sophisticated," with criminals monetizing breaches more efficiently than ever. Lisa Forte of Red Goat Cyber Security noted that Stuart’s concerns underscored a critical vulnerability: businesses should now assume an attack is a matter of when, not if. The impact of IT failures has been stark. Between January 2023 and February 2024, nine major UK banks and building societies including Barclays, Lloyds, Nationwide, and HSBC experienced 158 IT outages, totaling 803 hours (33 days) of disruption. In January, a Barclays outage on payday left customers unable to access funds, while February saw further outages affecting 1.2 million people. Though Barclays UK CEO Vim Maru apologized for the disruptions, he confirmed no evidence of a cyberattack or malicious intent. Beyond financial institutions, retailers like Co-op and Marks & Spencer have also faced severe disruptions from cyber incidents, highlighting the cross-sector nature of the threat. Bank executives, including Stuart, admitted the risks keep them "awake at night," with one describing the constant barrage of attacks as a daily reality. The Treasury Committee’s inquiry into banking resilience underscores the urgency of addressing these vulnerabilities, as failures ripple beyond individual accounts eroding confidence in the financial system itself.