21% of UK employees say they don’t always use official corporate AI tools provided by their organisation

Only 84% of security leaders in the UK feel resilient enough to survive unexpected or emerging AI-driven threat vectors over the next calendar year.

57.2% of IT and security professionals in both Germany and the U.K. who experienced a breach report being told to keep it confidential.

87% of IT and security professionals in the U.S., 85% in the U.K., and 77% in Germany say they would likely switch cybersecurity vendors due to data sovereignty concerns.

51% of leaders at UK organisations admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

Financial losses totalling around £270,000 were reported by UK organisations that experienced ransomware last year, a 50 per cent increase compared to previous year.

Of the UK ransomware reports made (323) where the sector of the organisation was listed, the manufacturing industry (42 reports), scientific and technical sector (21 reports) and education sector (19 reports) have all been impacted.

Of the 323 UK organisations that reported ransomware last year, more than 50 per cent were from Small Medium Enterprises (SMEs) (175 reports).

47% of UK employees confess that intense time constraints, cognitive overload, and everyday workplace distractions directly drive them to cut corners and make critical security errors, even when they are fully aware of safe protocols.

Across the UK, 58% of cybersecurity decision-makers report that the unsanctioned use of external software and rogue AI applications has directly degraded or actively compromised their security posture over the past 12 months.

48% of surveyed organisations in the UK deploy autonomous AI agents capable of taking actions on their own

323 UK organisations reported a ransomware attack between April 2025 and March 2026.

In the last 16 months, nearly 70% of Europe's ransomware activity was concentrated in Germany, the United Kingdom, France, Italy, and Spain.

60% of UK cybersecurity professionals say threats are already moving beyond email

54% of UK cybersecurity professionals consider traditional phishing emails the biggest threat to their organization

50% of UK organizations lack strong confidence in detecting threats across messaging and social platforms

66% of UK cybersecurity professionals believe employees are more likely to trust messages received through internal collaboration platforms

45% of UK organizations identify data used for AI and analytics as their biggest blind spot, the highest rate in Europe.

58% of UK organizations cite preventing data breaches as the primary reason for data sovereignty efforts.

GVA per employee in the UK cyber security sector increases from £116,200 to £131,200, a 13% rise.