The median perceived cost of the most disruptive breach or attack was £0 for businesses and £0 for charities, increasing to £30 for medium and large businesses.

There has been an increase in businesses reporting that the breach or attack led to loss of revenue or share value (2% in 2024/2025 to 5% in 2025/2026) and an increase in those reporting it resulted in reputational damage (1% in 2024/2025 to 3% in 2025/2026).

The proportion of businesses and charities experiencing any negative outcome following a breach or attack has remained consistent with 2024/2025 (19% for business and 11% for charities in 2025 compared to 16% for both businesses and charities in 2024/2025).

50% of SMBs say they would lose customers after a successful breach.

36.7% of victims among breached small businesses faced costs exceeding $500,000.

38.3% of small business leaders reported raising prices to address the financial impacts of a cyber incident.

62.5% of small businesses that suffered a breach reported a total financial impact of more than $250,000 in 2025.

The top consequences of breaches reported were operational downtime (71%), reputational damage (45%), and financial loss (41%)

Last summer, 44% of hotels experienced more than 12 hours of downtime due to an attack.

The most likely business impacts of a cyberattack on a hotel include reputational damage from negative reviews (66%), financial losses (46%), lawsuits (42%), lower occupancy (32%), and higher insurance premiums (30%).

12% of hotel IT and security leaders said an attack could lead to hotel closure.