UK annual breach survey: small businesses still have gaps in continuity planning
The UK government publishes its 2025/2026 Cyber Security Breaches Survey of businesses, charities and educational institutions. Among sampled small businesses, the proportion with business continuity plans covering cybersecurity fell from the previous survey. The report also compares outsourced support and technical controls.
Source Facts
Published on 30 April, the report's main fieldwork took place from August to December 2025. Results for businesses and charities are weighted, with education institutions covered in a separate annex. Sole traders and most public-sector organisations fall outside its scope.
The proportion of small businesses with a business continuity plan covering cybersecurity fell from 53% in the previous survey to 44%. The report also examines risk assessments, training, external security services, incident response and management responsibilities, providing context for comparing organisational preparedness.
Hong Kong businesses can use the survey questions for self-assessment, but proportions in the UK sample do not directly describe businesses in Hong Kong.
Original sources
Cyber security breaches survey 2025/2026
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration