78% of restaurant leaders delay security patches to avoid disrupting service.

Financial services experienced more than double the cross-sector average of cyberattack attempts per device in the first half of 2026.

80% of restaurants experienced a social engineering attack in the past year.

28% of restaurant chains lack real-time, centralized visibility into their security posture.

More than one-third of leaders at quick service and fast casual restaurant chains initially mistake a real cyberattack for a routine technical glitch.

80% of leaders at quick service and fast casual restaurant chains experienced at least one cyber incident in the past 12 months.

94% of leaders at quick service and fast casual restaurant chains describe themselves as confident or very confident in their ability to prevent or detect a cyberattack.

Malware activity averaged 39,341 hits per firewall in the first half of 2026, giving financial services the second-highest per-device malware intensity of any industry, behind only healthcare.

10% of restaurant chains have temporarily or permanently closed a location following a cyberattack.

38% of restaurant chains report inconsistent security practices across locations with varying IT maturity.

Cyber is the leading cause of both IT downtime and data loss for the fourth consecutive year.

70% of healthcare leaders are confident in their vendors' cybersecurity posture.

65% of organisations think a serious cyber attack could threaten their survival.

AI-driven attacks have more than doubled in frequency in the last 12 months, affecting 25% of organisations and are seen as the biggest resilience challenge over the next five years.

39% of healthcare practices manage cybersecurity entirely in-house.

43% of large organisations reported losing data as a result of a cyber attack.

30% of organisations cite cyber incidents as their biggest cause of IT downtime over the last 12 months, ahead of hardware failure at 19%.

Total annual revenue in the UK cyber security sector reaches £14.7 billion, a nominal increase of about 11% since the previous year.

There are 2,603 firms currently active in the UK providing cyber security products and services, an increase of 438 firms (20%) from 2,165 firms.

Attackers exploited vulnerabilities an average of seven days before public disclosure in 2025.