In the last 16 months, nearly 70% of Europe's ransomware activity was concentrated in Germany, the United Kingdom, France, Italy, and Spain.

50% of UK organizations lack strong confidence in detecting threats across messaging and social platforms

60% of UK cybersecurity professionals say threats are already moving beyond email

66% of UK cybersecurity professionals believe employees are more likely to trust messages received through internal collaboration platforms

54% of UK cybersecurity professionals consider traditional phishing emails the biggest threat to their organization

45% of UK organizations identify data used for AI and analytics as their biggest blind spot, the highest rate in Europe.

58% of UK organizations cite preventing data breaches as the primary reason for data sovereignty efforts.

UK SI 2025/1110 mandates UN R155 and R156 for type-approval effective 13 November 2025

Total gross value added (GVA) for the UK cyber security sector reaches approximately £9.1 billion, an increase of 17% since the previous year.

Total annual revenue in the UK cyber security sector reaches £14.7 billion, a nominal increase of about 11% since the previous year.

GVA per employee in the UK cyber security sector increases from £116,200 to £131,200, a 13% rise.

In 2025, dedicated cyber security firms raised £184 million across 47 deals.

There are 2,603 firms currently active in the UK providing cyber security products and services, an increase of 438 firms (20%) from 2,165 firms.

Approximately 69,600 full-time equivalent employees work in cyber security roles across the identified UK cyber security firms, an increase of about 2,300 jobs (3%) in the last 12 months.

93% of UK organisations have complete or partial visibility over where their data is stored, processed and potentially accessible, including 48% with complete visibility and 45% with only partial visibility.

Cyber security was considered a high priority for senior management in around seven in ten businesses (72%) and six in ten charities (60%).

Only 25% of UK IT decision makers report having strong governance frameworks for agentic AI.

Impersonation breaches or attacks were significantly down among charities compared with the previous two years (7% this year down from 11% in 2024/2025 and 12% in 2023/2024).

17% of UK IT decision makers say governance for agentic AI is basic or minimal.

Medium (65%) and large (69%) businesses were more likely to have experienced a cyber breach or attack in the last 12 months compared to micro (42%) and small (46%) businesses.