Guide

Your guide to the 2026 Cyber Security Breaches Survey

Summary

Every year, the Department for Science, Innovation and Technology (DSIT) and the Home Office commission one of the most comprehensive pictures we have of the UK cyber landscape. ​

The Cyber Security Breaches Survey 2026, draws on responses from 2,112 UK businesses, 1,085 charities and 577 educational institutions, with fieldwork carried out between August and December 2025. It is the closest thing we have to an annual health check for how organisations across the UK are coping with cyber threats. And this year’s edition tells a clear story, one that has significant implications for how we approach staff awareness and behaviour.

The headline volumes are similar to last year, but the character of the threat is not. Among all breaches, the proportion who experienced phishing and nothing else rose from 45% to 57%. For a growing share of organisations, phishing is no longer one risk among many. Training investment is going backwards with staff cyber awareness training rates falling from 21% to just 17%.​

​

Complete the form below to download or view this content:

PROVEN SOLUTIONS

Trusted by leading brands

“The Boxphish platform has helped us raise cyber awareness across our business and build a real culture of security. We issue tailored Boxphish training content monthly to all colleagues. The videos are short, punchy and relevant for work and home life and can be completed any time on any device without impacting the day job. This regular bite size training is helpful in repeating best practice messages, helping us to protect both ourselves and our company.”

Organisational Design & Development Manager
Eurocell

“Boxphish has very quickly had a brilliant impact on the security culture at the council. The content of the educational modules and simulations are really well thought out, accessible and engaging across the whole workforce, meaning they can be used very effectively right out of the box. Implementing, running and maintaining the system requires very little administration – a huge advantage for small teams with limited resources.”

Principle Information Security Officer
North Lincolnshire Council

“The training courses delivered via the Boxphish platform have been well received by our employees and we are seeing great results. Traditional training methods can be extremely long-winded, taking hours, if not days. Being able to deliver training content frequently but with minimal effort from an administration point of view has been incredibly valuable. The content is short, snappy and to the point, and this has had a positive impact on employee engagement levels and overall completion rates.”

Information Security Advisor & Data Protection Officer
Robertson

“Boxphish offer a wide range of phishing simulations ideal for educating our staff. They’re quick to setup and send, and easy to report on. Being able to identify the weaker spots within our growing Multi Academy Trust has allowed us to be really targeted with our training and we’ve seen great results so far.”

Head of IT
NPCAT

“Great product and fantastic personal service from the Boxphish team.”

Head of Information Technology
Port of Tyne

“Working with Boxphish has enabled me to efficiently deploy an automated cyber awareness programme so I can feel confident we are doing everything we can to educate our end users on the evolving cyber threats, it has been a great experience using the platform.”

IT Manager
Leicester Tigers

“Boxphish has made our transition into this market seamless, and the support from the Boxphish team from the initial contact with the customer to the onboarding has been exceptional.”

Director
Halo-IS

Ready to transform your cyber culture? Book a demo today!

Book a demo