Around Half of All UK Businesses Have Experienced a Cyber Attack, Says Superscript

Some interesting research here, which suggests that many businesses are hoping the problem will go away, or not hit them again. Here’s the word;

More than half of UK businesses have experienced a cyber-security breach in the past 12 months, yet almost a quarter believe they are already doing everything possible to protect themselves, according to new research from digital insurance broker Superscript.

Published in Cyber-security in 2026: Risks, breaches and practical protection for UK businesses, the report combines research from 1,000 UK business owners with expert insight from Superscript, SafeWeb, DRD Partnerships and CFC.

The findings reveal a growing disconnect between the cyber threats businesses face and how prepared they believe they are to deal with them.

While 51% of businesses reported experiencing a cyber-security breach in the last year, 24% said they believe they are already doing everything they can to protect themselves against cyber attacks.

Confidence remains high despite the prevalence of incidents. More than a third (34%) say they are “very confident” their current cyber-security setup would protect them from common threats such as phishing attacks and malware.

However, fewer than half (46%) describe themselves as well prepared or very prepared to handle a significant cyber attack or data breach.

The report also found that cost is preventing many businesses from taking further action. More than a third (36%) say cost is the biggest barrier to improving their cyber-security, despite 39% identifying financial loss as their primary concern in the event of a cyber incident.

Despite cyber incidents becoming commonplace, only 37% of businesses say they currently have cyber insurance, suggesting many organisations remain financially exposed to the costs of business interruption, data recovery, ransomware and third-party liability.

Tori Butler, Managing Director — SME at Superscript, said: “Cyber-security has become one of the most significant risks facing modern businesses, but our research suggests many organisations still underestimate their exposure.”

“What’s particularly striking is the number of businesses that believe they’re already doing everything they can, despite more than half having experienced a cyber incident in the last year.”

“Cyber-security isn’t something businesses can set and forget. Threats evolve constantly, and organisations need to keep reviewing, testing and strengthening their approach if they want to stay protected.”

The research also highlights the ongoing challenge of human error. While many businesses have adopted technical safeguards such as firewalls and two-factor authentication, only 38% provide regular cyber-security training for staff.

Alongside new research, the report includes real-world examples of businesses affected by cyber incidents and practical guidance designed to help organisations improve their cyber resilience, regardless of size or sector.

Cyber-security in 2026: Risks, breaches and practical protection for UK businesses is available to download now at https://gosuperscript.com/business-insurance/cyber-insurance/cyber-risk-report/