Attacks are automated
Hackers aren’t just targeting big businesses one by one. They’re automating their attacks to scan for vulnerabilities across thousands of systems at once. Smaller businesses often have lighter defences – and that just makes you an easier target. In fact, the head of the UK’s National Cyber Security Centre has warned that attackers care more about easy access than how big or well known a business is.
Cyber attacks are happening all the time
According to the UK government’s Cyber Security Breaches Survey 2025/2026, 43% of businesses reported experiencing some kind of attack or breach in the last 12 months, which is about 612,000 businesses across the nation.
And it’s not just the big players. Nearly half (46%) of small businesses were hit, along with 42% of micro businesses with fewer than 10 staff.
Phishing is still the big one
Phishing, which is when someone tricks you into giving away your details, was the most common type of attack by a long way, hitting 38% of businesses. And of the businesses that had any kind of attack, 69% said phishing was the most disruptive.
Businesses told the survey they feel phishing has become a lot easier for attackers – and with AI making fake emails and messages from real companies more convincing than ever, we’re not surprised. (Psst – this is where Pokkit can help you figure out what’s real and what’s not!)
Attacks cause real losses
The survey found that in the top 5% of cases, small businesses lost £4,000 or more from a single attack – which isn’t an insignificant sum. Although many businesses lost less than this, a meaningful minority take a serious financial hit, and you don’t know what it might cost you.
Why you need Cyber Essentials
Cyber Essentials uptake is on the rise – around 5% of businesses across the UK now have at least the basic certification. But that still leaves 95% who don’t, and who could be more at risk.
Having Cyber Essentials gives you a solid, government-backed baseline of protection against common cyber attacks. It covers five basic technical controls to help keep you secure: firewalls, secure settings, access control, malware protection and keeping software updated.
According to the NCSC, organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance – a pretty good sign the basics really work. And, as a bonus, UK-based businesses with turnover of less than £20m can get free cyber liability insurance included, as long as their certification covers the whole organisation – win win.
It can win you work
More and more customers – especially government, the NHS and bigger firms – ask suppliers for Cyber Essentials before they’ll sign on the dotted line. Having it already means you’re ready to go whenever a new opportunity comes knocking on the door.
Get your Cyber Essentials sorted today
There’s never been a better time to get your Cyber Essentials certification. We’ll guide you through every step via chat – no need to book a consultant to come in and go through everything. And if you don’t pass first time, we’ll help you fix what’s missing and try again, as many times as you need.
