More than a third of small UK firms impacted by hacks – report
The latest Hiscox Cyber Readiness Report reveals that nearly two in five small UK firms suffered a cyber attack in the past year, with each incident costing an average of £26,650. British companies are the most vulnerable globally and are investing heavily in resilience measures, though many still…
In a recent study released by insurance provider Hiscox, data shows that 38% of small businesses in the United Kingdom experienced a successful cyber hack within the previous 12 months. The average cost per attack was reported at £26,650, a figure that underscores the growing financial burden of cybercrime on the country’s smaller enterprises.
What the Report Says
The findings come from a global survey of almost 7,000 cybersecurity decision‑makers in small firms, including 1,000 respondents from the UK. The survey, which is part of Hiscox’s annual Cyber Readiness Report, compares the UK’s experience with that of its international peers.
Globally, 29% of small firms reported being hit by a successful cyber attack, making British companies the most vulnerable group in the world. Those that were affected worldwide recorded an average of four incidents in the last year, while the UK’s average cost per incident was 35,908 US dollars (about £26,650). On a global scale, cyber incidents cost firms an average of 52,000 US dollars (around £38,600) per year and caused roughly 32 hours of operational disruption.
Broader Business Impact
The report highlights that the repercussions of a hack extend far beyond the immediate financial loss. Nearly one in three companies worldwide—32%—reported that a cyber incident delayed their growth and expansion plans. Similar percentages noted increases in staffing costs (31%), financial damage (30%) and lost business opportunities (29%). More than a quarter of affected firms—28%—faced financial penalties, while 26% suffered bad publicity.
Investments in Cyber Resilience
Despite the risks, small UK firms are allocating significant resources to protect themselves. The average UK small business spends about 59,700 US dollars (≈£44,300) on resilience measures, the third highest spending level worldwide and well above the global average of 51,000 US dollars (≈£38,000). The data also shows a growing trend to tie executive pay to cybersecurity outcomes: 25% of UK small firms now link top‑level compensation to cyber performance, compared with 32% worldwide.
Why It Matters for Small Businesses
Cyber attacks are no longer a one‑off event; they have become a recurring cost that can cripple a small business’s operations and reputation. The rising investment in cybersecurity indicates that firms are beginning to treat cyber risk as a strategic concern rather than a peripheral issue.
Next Steps and Unresolved Questions
While the report provides a clear picture of the current landscape, it leaves some questions unanswered. For instance, the exact nature of the most common attack vectors in the UK remains unspecified, and the long‑term effectiveness of the increased spending on resilience measures has yet to be measured. Small firms will need to stay vigilant and continually adapt their security strategies as the threat environment evolves.
Key Takeaways
- 38% of UK small businesses were hacked in the last year, the highest rate globally.
- Each incident costs an average of £26,650, with firms spending over £44,000 annually on cyber resilience.
- Cyber attacks delay growth, increase staffing costs, and can lead to financial penalties and bad publicity.
- 25% of UK firms now link executive pay to cybersecurity performance.
- The trend shows cyber risk is becoming a recurring, strategic cost for businesses.
Frequently Asked Questions
- What is the average cost of a cyber attack on a UK small firm? The study reports an average cost of £26,650 per incident.
- How many UK small firms have experienced a cyber attack? According to the report, 38% of small businesses faced a successful hack in the past year.
- What are UK firms doing to protect themselves? On average, they spend about £44,300 on resilience measures and increasingly tie executive pay to cybersecurity outcomes.
- Are there penalties for failing to secure a business? Yes, 28% of affected firms faced financial penalties.
- What is the global average cost of cyber incidents? Globally, firms spend about £38,600 per year on average.
Why it matters
Cyber attacks are a growing threat to small businesses, affecting not only finances but also growth prospects and reputation. Understanding the scale and cost of these incidents helps firms prioritize investment in security and resilience strategies.
Key points
- 38% of UK small firms hit by cyber attacks in the last year
- Average cost per incident is £26,650
- UK firms spend £44,300 on cyber resilience, third highest worldwide
- 25% of UK firms link executive pay to cybersecurity outcomes
- Cyber incidents delay growth, increase staffing costs, and can lead to penalties
Frequently asked questions
What is the average cost of a cyber attack on a UK small firm?
The study reports an average cost of £26,650 per incident.
How many UK small firms have experienced a cyber attack?
According to the report, 38% of small businesses faced a successful hack in the past year.
What are UK firms doing to protect themselves?
On average, they spend about £44,300 on resilience measures and increasingly tie executive pay to cybersecurity outcomes.
Are there penalties for failing to secure a business?
Yes, 28% of affected firms faced financial penalties.
What is the global average cost of cyber incidents?
Globally, firms spend about £38,600 per year on average.
