70% of German executives express confidence in policy frameworks, compared with 54% of US executives and 51% of UK executives

51% of observed ransomware victims in Q1 2026 were based in the United States; the United Kingdom and Canada each accounted for 4%.

Just over four in ten businesses (43%) and around three in ten charities (28%) reported having experienced any kind of cyber security breach or attack in the last 12 months.

Medium (65%) and large (69%) businesses were more likely to have experienced a cyber breach or attack in the last 12 months compared to micro (42%) and small (46%) businesses.

Around a third of businesses (30%) conducted a risk assessment covering cyber security, in line with last year (29%).

The United States remains the most heavily targeted jurisdiction in leak site activity, followed by Canada, Germany, the UK, and other parts of Europe.

Cyberattacks against agencies in the U.S. have surged 25% in the last year and occur more frequently on a weekly basis than in the UK.

Only 28% of leaders in France feel certain they meet regulatory requirements, compared to 60% in the UK.

64% of enterprise leaders in the UK view AI as posing little or no threat to networks.

65% of CISOs agreed that their organization prioritizes Cyber Resilience over traditional prevention, detection, and response.

In 2025, 19% of CISOs indicated that recovery efforts from cyber incidents extended as long as two weeks.

67% of CISOs stated they are the primary executive responsible for ensuring Cyber Resilience within their organization.

In 2025, 98% of organizations reported spending between $1 and $5 million to recover from cyber incidents, with the average recovery cost per incident being $2.5 million.

72% of CISOs agreed that their role has evolved to include leading their organization’s ability to recover continuity following a cyberattack or security incident.

In 2025, 61% of CISOs indicated that their organization’s board and C-suite expect the cybersecurity group to guarantee zero breaches and ransomware incidents.

In 2025, 55% of Chief Information Security Officers (CISOs) in the US and UK reported that their organization experienced a cyberattack, ransomware infection, compromise, or data breach that rendered mobile, remote, or hybrid endpoint devices inoperable.

In 2025, 57% of CISOs reported that their organizations took more than 4.5 days on average for full remediation and recovery after a cyber incident.

In 2025, 83% of CISOs reported that Cyber Resilience was more critical for their organization than traditional cybersecurity measures, compared to 90% in the previous year.

In 2025, not a single Chief Information Security Officer (CISO) reported being able to recover from a cyber incident within a day.

In December 2025, Japan had 18%, the UK had 16%, and the US had 12% of organizations classified as 'Exceptional' in AppSec maturity.