Cyber breaches and attacks identified by businesses and charities, UK
Official statistics
The share of UK businesses and charities that identified any cyber security breach or attack in the last 12 months, phishing included, from DSIT's Cyber Security Breaches Survey.
Businesses identifying a breach or attack
43.21%
2025/26 · 28.28% of charities
Verified against source, 9 November 2026, 15:04 UTC- Businesses
- Charities
Source: Department for Science, Innovation and Technology. Contains public sector information licensed under the Open Government Licence v3.0.
Data table
1 row
| Category | Businesses | Charities |
|---|---|---|
| 2025/26 | 43.21% | 28.28% |
Source and licence
- Publisher
- Department for Science, Innovation and Technology
- Check it yourself
- https://www.gov.uk/government/collections/cyber-security-breaches-survey
- Licence
- Open Government Licence v3.0 – Contains public sector information licensed under the Open Government Licence v3.0.
- Retrieved
- 9 November 2026, 14:51 UTC
- Raw files fetched
- https://www.gov.uk/api/content/government/statistics/cyber-security-breaches-survey-20252026SHA-256 88e0d35a4f56956f293edfaca37b9fabc702a43e466010284f100b353c1b2342 · 2,136 bytes
- https://assets.publishing.service.gov.uk/media/69f317b4ab602a88957eeeff/DSIT_Cyber_Security_Breaches_Survey_2025-2026_tables_.odsSHA-256 5cf2b250a3222c6bee7704539d6d5e92b25587bd8b3cf0e9f68df4d50eedb401 · 82,100 bytes
Verification
Verified against source, 9 November 2026, 15:04 UTC Run at 9 November 2026, 15:04 UTC; 2 of 2 figures matched the live source.
| Result | Check | Detail |
|---|---|---|
| Pass | Provenance recorded | Department for Science, Innovation and Technology; Open Government Licence v3.0; retrieved 2026-11-09T14:51:17Z; 2 raw file(s) |
| Pass | Raw files match recorded SHA-256 | 2 of 2 files intact |
| Pass | Re-parsing raw files reproduces figures | 2 of 2 figures and the headline reproduced; the meta's accreditation and bases match |
| Pass | Figures are finite numbers | 2 figures, 0 invalid |
| Pass | Live source matches every figure | 2 of 2 figures match exactly after downloading 2 source file(s) again (2 byte-identical); the headline matches; the meta's accreditation and bases match |
| Pass | GOV.UK table is current | latest period 2025/26 ended 223 days before retrieval (limit 500), from Cyber Security Breaches Survey 2025/2026 data tables |
| Pass | DSIT's report agrees | 2 of 2 figures the report https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026 states match, each rounded half up as it rounds them |
| Pass | Breaches excluding phishing are no more than all breaches | 2 of 2 cases of Table 28's organisation types give no more breaches excluding phishing than including it |
| Pass | Every organisation gives one answer | 1 of 1 cases of Table 28's organisation types, where no answer is suppressed, give shares that add up to all organisations within the four places' rounding within 0.0002 (0 exactly) |
| Pass | Source page answers | https://www.gov.uk/government/collections/cyber-security-breaches-survey – HTTP 200 |
Notes
- The share of organisations that identified any cyber security breach or attack in the 12 months before they were interviewed, phishing included, as DSIT's survey of UK businesses and charities estimates it; the respondents and effective base behind each figure are in the record's JSON.
- DSIT classifies the survey's figures, except those for education institutions, as official statistics.