Skip to main content
VendorsDepartment for Science, Innovation & Technology

Department for Science, Innovation & Technology

Cybersecurity reports and statistics published by Department for Science, Innovation & Technology

8 categories2 reports

Research Reports

Reports and publications from Department for Science, Innovation & Technology

Recent Statistics & Reports

Approximately 69,600 full-time equivalent employees work in cyber security roles across the identified UK cyber security firms, an increase of about 2,300 jobs (3%) in the last 12 months.

5/27/2026
CybersecurityEmploymentLabor Market

GVA per employee in the UK cyber security sector increases from £116,200 to £131,200, a 13% rise.

5/27/2026
CybersecurityProductivityGross Value Added

In 2025, dedicated cyber security firms raised £184 million across 47 deals.

5/27/2026
CybersecurityInvestmentVenture Funding

Total annual revenue in the UK cyber security sector reaches £14.7 billion, a nominal increase of about 11% since the previous year.

5/27/2026
CybersecuritySector RevenueEconomic Output

Total gross value added (GVA) for the UK cyber security sector reaches approximately £9.1 billion, an increase of 17% since the previous year.

5/27/2026
CybersecurityGross Value AddedEconomic Output

There are 2,603 firms currently active in the UK providing cyber security products and services, an increase of 438 firms (20%) from 2,165 firms.

5/27/2026
CybersecurityIndustry SizeBusiness Growth

Impersonation breaches or attacks were significantly down among charities compared with the previous two years (7% this year down from 11% in 2024/2025 and 12% in 2023/2024).

5/27/2026
UKImpersonation

There has been an increase in businesses reporting that the breach or attack led to loss of revenue or share value (2% in 2024/2025 to 5% in 2025/2026) and an increase in those reporting it resulted in reputational damage (1% in 2024/2025 to 3% in 2025/2026).

5/27/2026
UKBreachBreach Consequences

Adoption of more advanced controls like two-factor authentication (47% businesses and 38% charities), a virtual private network for staff connecting remotely (36% businesses and 17% charities) and user monitoring (30% businesses and 31% charities) remain lower than other measures.

5/27/2026
UKSecurity controls2FA

A formal cyber security strategy was in place for almost six in ten medium businesses (57%), rising to seven in ten large businesses.

5/27/2026
UKCyber Security Strategy

Around one in seven businesses (14%) and one in five charities (22%) said they held personal data that was not protected by techniques such as anonymisation or encryption, suggesting that the majority do protect personal data (77% of businesses and 69% of charities).

5/27/2026
UKData ProtectionData Encryption

Around a third of businesses (30%) conducted a risk assessment covering cyber security, in line with last year (29%).

5/27/2026
UKRisk Assessment

Cyber security was considered a high priority for senior management in around seven in ten businesses (72%) and six in ten charities (60%).

5/27/2026
UKCyber Security

Seeking external information or guidance on cyber security was reported by 44% of businesses and 31% of charities.

5/27/2026
UKExternal Guidance

The most commonly cited individual source of information remained external cyber security or IT consultants/providers (27% of businesses and 13% of charities).

5/27/2026
UKExternal GuidanceCyber Security Consultant

The proportion of charities experiencing a takeover has decreased from 3% in 2024/2025 to 1% this year (although was in line with 2% in 2023/2024).

5/27/2026
UKTakeover

Around eight in ten businesses (81%) and charities (84%) said they informed directors or trustees following an incident, and 62% of businesses and 73% of charities said they kept an internal record of the incident.

5/27/2026
UKIncident Reporting

Medium (65%) and large (69%) businesses were more likely to have experienced a cyber breach or attack in the last 12 months compared to micro (42%) and small (46%) businesses.

5/27/2026
UKBreach

Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities)

5/27/2026
UKPhishing

The proportion of businesses and charities experiencing any negative outcome following a breach or attack has remained consistent with 2024/2025 (19% for business and 11% for charities in 2025 compared to 16% for both businesses and charities in 2024/2025).

5/27/2026
UKBreachBreach Consequences

Showing 1-20 of 26 results