Photo via Evening Standard

More than a third of small UK firms impacted by hacks – report

Read the original at Evening Standard ↗
Cite

Williams, H. (2026, September 15). More than a third of small UK firms impacted by hacks – report. Evening Standard. https://www.standard.co.uk/news/tech/hiscox-b1296997.html

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

Evening Standard · collected 2026-09-15 · by Holly Williams

Quick Summary

A recent report based on a survey of nearly 7,000 cybersecurity decision-makers from smaller firms globally, including 1,000 from the UK, reveals that over one-third of small British companies experienced at least one successful cyber attack in the past year. These attacks cost affected UK businesses an average of £26,650 each and caused operational disruptions lasting around 32 hours. The report highlights increased spending on cybersecurity measures, with UK firms investing an average of £44,294 annually to protect against threats.
Written by AI on 2026-09-15, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Nearly two in five small British businesses were hit by a cyber attack in the past year, costing each affected firm an average of nearly £26,650. A global survey involving nearly 7,000 cybersecurity decision-makers from smaller firms worldwide, including 1,000 from the UK, revealed that British companies were among the most vulnerable. Globally, the study found that cyber incidents cost firms an average of £38,604 annually and resulted in around 32 hours of operational disruption. Moreover, almost one-third (32%) of companies worldwide reported that such attacks delayed growth and expansion plans, while similar percentages noted increased staffing costs (31%), financial damage (30%), and lost business opportunities (29%). Additionally, over a quarter of impacted firms faced financial penalties due to these incidents.

Written for “UK Small Firm Cyber Attacks” on 2026-11-04, grounded in this article and the 0 other(s) covering the same event.

Story

📰 UK Small Firm Cyber Attacks
Economy/Business · 1 article(s) covering the same event.

Compared with similar articles

Nothing to compare against. No article is close enough to this one for the pipeline to have linked or judged the pair.
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
10
sentences that state something as happening or true
Uncertain
20%
2 of 10 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
64/100
Evening Standard's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Economy/Business
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-15 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Evening Standard · 8470 article(s) · 73 correction(s) detected
Running correction rate · 73 correction(s)

Who wrote this

Holly Williams
102 article(s) here · 0 carrying a prediction
🔮 The telecoms giant said the bulk of the cost savings – about £300 million – will come from job cuts among its 16,000-strong workforce in the UK, with aims to reduce its staff costs by around 30%.
🔮 The Leeds-based group said Mr Potts would take on the role with immediate effect, with current boss Allan Leighton becoming non-executive chairman, two years after he returned to head the firm.
🔮 The telecoms giant said the bulk of the cost savings – about £300 million – will come from job cuts among its 16,000-strong workforce in the UK, with aims to reduce its staff costs by around 30%.
🔮 The group said Mr Potts would take on the role with immediate effect, with current boss Allan Leighton becoming non-executive chairman, two years after he returned to head the firm.
🔮 The telecoms giant said the bulk of the cost savings – about £300 million – will come from job cuts among its 16,000-strong workforce in the UK, with aims to reduce its staff costs by around 30%.
🔮 The telecoms giant said the bulk of the cost savings – about £300 million – will come from job cuts among its 16,000-strong workforce in the UK, with aims to reduce its labour costs by around 30%.
🔮 The Bank of England is widely expected to hike interest rates on Thursday to 4% from 3.75% given rising UK inflation, but lower oil prices could see policymakers rein in their signals for future rises.
🔮 Mr Mackenzie will stand down at the end of February after leading Britain’s second biggest pub chain for nearly eight years.
🔮 The oil major agreed the sale of a 65% holding in Castrol to US investment firm Stonepeak in December last year and will retain the remaining 35% stake in a new joint venture.
🔮 Speaking at the group’s Chessington World of Adventures Resort hotel outside London, he told the Press Association the sector’s room key technology systems were robust and security failures would be caused only by “human error”.
Also by Holly Williams
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 102 articles by Holly Williams →

Topics

British Hiscox

Subjects

British NORP · 2× Eddie Lamb PERSON · 1× Hiscox ORG · 1×

Narrative

Cyber incidents now cost firms worldwide around 52,000 US dollars a year on average (£38,604) and cause around 32 hours of operational disruption, it found. But the survey shows the impacts can be far-reaching, with almost one in three (32%) of companies worldwide saying it delayed growth and expansion plans, and similar results for those saying it increased staffing costs (31%), caused financial damage (30%) and saw business opportunities lost (29%).
framing: assertive · carried by 1 article(s) · first seen 2026-09-15
2026-09-15 · Evening Standard
More than a third of small UK firms impacted by hacks – report · assertive framing

Claims (10 extracted, 2 hedged)

Nearly two in five small British businesses were hit by a cyber attack in the past year at a cost of nearly £27,000 each, according to new research. uncertain
businesses → hit → research
The report – based on results of a global survey of nearly 7,000 cybersecurity decision-makers in smaller firms, including 1,000 in the UK – found British firms were the most vulnerable among their global counterparts, with 29% worldwide saying they were hit by a successful cyber attack. asserted
they → base → attack
Those affected globally reported an average of four cyber attack incidents over the same period. asserted
Those → affect → period
In the UK, the cost of each cyber attack was 35,908 US dollars on average (£26,650), according to the study. uncertain
cost → accord → study
Cyber incidents now cost firms worldwide around 52,000 US dollars a year on average (£38,604) and cause around 32 hours of operational disruption, it found. But the survey shows the impacts can be far-reaching, with almost one in three (32%) of companies worldwide saying it delayed growth and expansion plans, and similar results for those saying it increased staffing costs (31%), caused financial damage (30%) and saw business opportunities lost (29%). asserted
opportunities → cost → %
And more than a quarter of those impacted by a hack also faced financial penalties (28%), or bad publicity (26%). asserted
quarter → impact → penalties
Firms are spending significant sums to ward off the threat of hacks, with the study revealing the average UK small firm spend on resilience measures is now 59,700 dollars (£44,294) – the third highest worldwide and above the 51,000 US dollar (£38,000) global average. asserted
spend → spend → average
There is also an increasing trend to link pay for top bosses to cybersecurity, with 25% of small UK firms now doing so, and 32% worldwide. asserted
% → be → firms
Eddie Lamb, global head of cyber at Hiscox, said: “During our 20-plus years of insuring cyber risks and our decade of cyber readiness research, we’ve seen a clear shift in the cyber threat and how businesses respond to it. asserted
businesses → say → it
“Cyber risk has become a recurring cost, not an exceptional event, so the investment we’re seeing in cyber resilience is good news as businesses start to take back control.” asserted
businesses → become → control
💬Give feedback
🕘History 🎫Support