--- title: "SME Business Cyber Security: 2026 Breach Data" description: Small business cyber security slipped back this year. What the government's Cyber Security Breaches Survey shows, and what SMEs should fix first. image: https://noble-it.co.uk/hubfs/small-business-cyber-security-breaches-survey-2026-noble-it.jpg --- [Skip to the main content.](https://noble-it.co.uk/blog/small-business-cyber-security-breaches-survey-2026#main-content) [![Noble IT Logo](https://noble-it.co.uk/hs-fs/hubfs/Branding/Noble%20it_Black_Green-1.png?width=200&height=41&name=Noble%20it_Black_Green-1.png "Noble IT Logo")](https://noble-it.co.uk) [![Noble IT Logo](https://noble-it.co.uk/hs-fs/hubfs/Branding/Noble%20it_Black_Green-1.png?width=150&height=31&name=Noble%20it_Black_Green-1.png "Noble IT Logo")](https://noble-it.co.uk) - Services - [IT Support](https://noble-it.co.uk/services/it-support) - [Cyber Security](https://noble-it.co.uk/services/cyber-security) - [IT Management & Consulting](https://noble-it.co.uk/services/it-management-and-consulting) - [Tier 4 Service Escalation](https://noble-it.co.uk/services/tier-4-service-escalation) - [Unified Communications & Connectivity](https://noble-it.co.uk/services/unified-communications-and-connectivity) - [Disaster Recovery & Business Continuity](https://noble-it.co.uk/services/disaster-recovery-and-business-continuity) - Resources - [Blog](https://noble-it.co.uk/blog) - [About Us](https://noble-it.co.uk/about-us) - [Contact Us](https://noble-it.co.uk/contact) Search [Talk to us](https://noble-it.co.uk/contact) Toggle Menu Search Toggle Menu [Talk to us](https://noble-it.co.uk/contact) - Services - [IT Support](https://noble-it.co.uk/services/it-support) - [Cyber Security](https://noble-it.co.uk/services/cyber-security) - [IT Management & Consulting](https://noble-it.co.uk/services/it-management-and-consulting) - [Tier 4 Service Escalation](https://noble-it.co.uk/services/tier-4-service-escalation) - [Unified Communications & Connectivity](https://noble-it.co.uk/services/unified-communications-and-connectivity) - [Disaster Recovery & Business Continuity](https://noble-it.co.uk/services/disaster-recovery-and-business-continuity) - Resources - [Blog](https://noble-it.co.uk/blog) - [About Us](https://noble-it.co.uk/about-us) - [Contact Us](https://noble-it.co.uk/contact) ##### Managed IT Services - [IT Support](https://noble-it.co.uk/services/it-support) - [Cyber Security](https://noble-it.co.uk/services/cyber-security) - [IT Management & Consulting](https://noble-it.co.uk/services/it-management-and-consulting) - [Tier 4 Service Escalation](https://noble-it.co.uk/services/tier-4-service-escalation) - [Unified Communications & Connectivity](https://noble-it.co.uk/services/unified-communications-and-connectivity) - [Disaster Recovery & Business Continuity](https://noble-it.co.uk/services/disaster-recovery-and-business-continuity) ##### [![Schedule your 360 review   Let's discuss how Noble IT can support your business.   No obligations—just a straightforward conversation with someone who knows IT.  ](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/25894449/interactive-390398591225.png)](https://noble-it.co.uk/hs/cta/wi/redirect?encryptedPayload=AVxigLI1FF3qwlcAdCWeW0U0fzZ0BAaWlqaqZV4rlTqyVeG9OMjFtUWzb%2Bl85l4y24TxGeWtKbhcqMrxotxCcALNfk9qA1%2B3F4xtnxviYh7ATu8XJwavxDK0hexK0bFfygtnLv6adXiES5UV%2BMDeUmr0mqOp1GUEK8%2Fzw8r21bJlmQZZkiJaDZ9lnY9pnax2zgGU5Ur7hJGEJMk6LB6QSZI%3D&webInteractiveContentId=390398591225&portalId=25894449) 6 min read # SME Business Cyber Security: 2026 Breach Data [Adam Nichols](https://noble-it.co.uk/blog/author/adam-nichols) : October 5, 2026 [Cyber Security](https://noble-it.co.uk/blog/tag/cyber-security) ![SME Business Cyber Security: 2026 Breach Data](https://noble-it.co.uk/hubfs/small-business-cyber-security-breaches-survey-2026-noble-it.jpg) Every year, the government asks a few thousand UK organisations whether they've been attacked. The answers in the[Cyber Security Breaches Survey 2025/2026](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026), published by the Department for Science, Innovation and Technology and the Home Office in April 2026, are surprisingly flat. 43% of UK businesses identified a breach or attack in the last 12 months. That's exactly the same figure as the year before. Flat sounds reassuring. It isn't. After months of big-name retail attacks in the news, cyber security for small and medium sized businesses hasn't improved. For businesses with 10 to 49 staff, it's gone backwards. At [Noble IT](https://noble-it.co.uk/), we have a lot of clients with20 and 100 staff, right where the survey says the ground is slipping. So we've pulled out the findings that matter for businesses that size, and what we do about each one. ## Small business cyber security has slipped back Last year's survey showed SME’s tightening up. This year, most of that progress disappeared. The share carrying out a cyber risk assessment fell from 48% to 41%, and business continuity plans that cover cyber dropped from 53% to 44%. Formal cyber security policies fell from 59% to 52%, taking small businesses back to where they were in 2023/2024. Micro businesses, with fewer than 10 staff, moved the other way. Their use of two-factor authentication rose from 35% to 43%. The smallest firms are catching up, while the ones with more people and more client data to protect are drifting. ## Fewer reported attacks doesn't mean fewer attacks 46% of small businesses reported a breach or attack, against 65% of medium-sized ones. You might read that as smaller firms being less of a target. The report doesn't. Its authors suggest smaller organisations may simply be worse at spotting attacks, because they have less monitoring in place. So the useful question isn't "have we been attacked?" It's "would we know if we had?" This is the gap Noble IT's[cyber security service](https://noble-it.co.uk/services/cyber-security) is built around. Every laptop, PC and server we look after is covered by 24/7 managed endpoint detection and response. Separately, identity threat detection watches how accounts behave and flags a compromised login, even when the password used was correct. We fix problems before you know they exist. You just carry on with your day. ## Phishing is still the main event Ask a small-medium sized business owner about their biggest cyber security risk and most will say ransomware. The survey says otherwise. Ransomware hit 1% of businesses this year, down from 3%. Phishing hit 38%. Among businesses that were breached, 88% experienced phishing, and for 51% it was the only type of attack they saw (up from 45% last year). Interviewees told researchers phishing had become easier for attackers to commit. Several were worried that AI-written emails no longer carry the clumsy spelling and grammar staff were trained to look for. The damage is rarely a dramatic ransom demand. It's someone spending an hour checking whether an invoice is genuine. Staff time spent investigating was the most common reason businesses gave for phishing being disruptive (21%), and 11% of breached businesses said attacks stopped staff doing their normal work. If staff can no longer rely on bad spelling to spot a fake, more of the filtering needs to happen before the email lands. Our email security verifies senders and blocks phishing and impersonation attempts before they reach an inbox, so your Office Manager isn't the last line of defence. Anything suspicious that does get through can be forwarded to the NCSC's[Suspicious Email Reporting Service](https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email) at report@phishing.gov.uk. ## Recovery is taking longer This is the finding most coverage will miss. The share of businesses getting back to normal within a day of their most disruptive attack fell from 92% to 87%. For micro businesses it fell from 92% to 86%. The consequences are getting heavier too. Businesses reporting lost revenue after a breach rose from 2% to 5%. Reputational damage rose from 1% to 3%. Small numbers, but they've more than doubled in a year. Recovery speed comes down to what you set up before anything goes wrong. The backup that's been failing silently for six weeks? The restore nobody has ever tried? We monitor backups so failures get caught long before you need them, and our[disaster recovery and business continuity](https://noble-it.co.uk/services/disaster-recovery-and-business-continuity) work is designed to get you running again quickly. ## What does a breach actually cost? We're not going to tell you a cyber attack will cost you six figures. For most businesses, it doesn't. The median reported cost of a business's most disruptive breach was £0. No bull. The picture changes at the sharp end. One in twenty breached businesses put the cost at £4,000 or more, rising to £10,000 for medium and large firms. Where an attack actually caused harm, such as stolen money or lost files, the median cost was £560 and the top 10% reported £10,000 or more. Those are self-reported figures, so the real cost of staff time and disruption is likely to be higher. For a Finance Director, that's the useful way to think about it. Not a scary headline number, but a small chance of a large bill you can't predict. ## Cyber Essentials is becoming a condition of doing business Only 5% of businesses hold[Cyber Essentials](https://www.ncsc.gov.uk/cyberessentials/overview), the government-backed certification. Among small businesses, that more than doubled from 5% to 12%. The reason becomes clear when you look at who's asking for it. The share of large businesses requiring their suppliers to hold Cyber Essentials jumped from 10% to 26%. If you sell to larger organisations, don't be surprised when that request lands. It's also shaping cyber security insurance for SME’s. Interviewees said cover becomes far more expensive without Cyber Essentials, and some insurers are starting to ask for Cyber Essentials Plus. Is certification a big job? Will it get in the way of running the business? Often less than you'd expect. 24% of businesses already have the technical controls in all five Cyber Essentials areas and just haven't certified. Our security posture audits and vulnerability testing show you exactly where you stand, so you know how far you are from certification before you commit to anything. From there, we help clients achieve and maintain both Cyber Essentials and Cyber Essentials Plus as part of our managed security. Our guide to the[latest Cyber Essentials changes](https://noble-it.co.uk/blog/cyber-essentials-2025) covers what the scheme now asks for. A note on compliance: Cyber Essentials isn't a legal requirement for most small businesses. UK GDPR does require you to keep personal data secure, though (the ICO's[guide to data security](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/a-guide-to-data-security/) explains what that means in practice), and Cyber Essentials is one of the clearest ways to show you've done the basics. ## The plan nobody has tested Only 25% of businesses have a formal incident response plan. 45% have none of the basic measures in place, such as named roles or guidance on who to notify. Who do you call first? Who tells your clients? Does anyone know where the plan is kept? Even where plans existed, interviewees described them sitting in a staff handbook, untested since the day they were written. For Noble IT clients, the first call is to us. We're part of your team, so the person picking up already knows your systems. ## Cyber security for SMEs: a checklist based on the gaps Generic checklists are everywhere. This one is built from what the survey shows businesses are actually missing. For step-by-step how-tos on each, the NCSC's[small organisations guide](https://www.ncsc.gov.uk/collection/small-business-guide) is free and written in plain English. - Turn on multi-factor authentication for every account. Only 47% of businesses require it. - Patch within 14 days. Just 34% have a policy to apply security updates in that window. - Train your team, then test them. 19% of businesses ran any cyber training last year, and 22% tested staff with mock phishing emails. We've written about[why cyber security training matters](https://noble-it.co.uk/blog/the-value-of-cybersecurity-training-in-the-modern-business-landscape). - Write a one-page incident response plan and walk through it. A 30-minute tabletop exercise will expose more gaps than the document itself. - Check your insurance. 22% of businesses didn't know whether they had any cyber cover. - Find out whether you already meet Cyber Essentials. A gap analysis will tell you how far off certification you are. - Ask your key suppliers about their security. Only 15% of businesses review supplier risk. ## Your IT partner is already your cyber adviser The most common source of cyber security advice for businesses isn't the government. It's whoever looks after their IT. 39% of small businesses turn to an external IT or cyber security firm for guidance. Just 1% of businesses named the[National Cyber Security Centre](https://www.ncsc.gov.uk/). Whether you've agreed to it or not, your IT partner is shaping your small business cyber security decisions. So it's worth asking them a few direct questions. When did you last test our backups? Do we meet Cyber Essentials today? Who is watching our systems at 2am? If the answers are vague, that tells you something. We'd rather be judged on numbers than adjectives. 93% of issues are resolved on first contact through our[managed IT support](https://noble-it.co.uk/services/it-support), and we've kept 100% of our clients. That's what happens when your IT partner acts like your IT department, not a helpdesk you ring when something breaks. ## Right. Let's talk. If you're not sure how your business measures up against these numbers, a[360 Review](https://noble-it.co.uk/book-360-review) is a straightforward way to find out. No obligations, no jargon about "next-generation threat paradigms". Just a clear picture of where you are and what to fix first. [Book Your 360 Review](https://noble-it.co.uk/book-360-review) *Source: Cyber Security Breaches Survey 2025/2026, Department for Science, Innovation and Technology and the Home Office, published 30 April 2026. Full report:*[*gov.uk*](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026) Share this article: [![Cyber Essentials 2025: Upcoming changes](https://noble-it.co.uk/hubfs/security-system-locks-data-computer-safety-generated-by-ai.jpg)](https://noble-it.co.uk/blog/cyber-essentials-2025) #### [Cyber Essentials 2025: Upcoming changes](https://noble-it.co.uk/blog/cyber-essentials-2025) [Adam Nichols](https://noble-it.co.uk/blog/author/adam-nichols) : Feb 20, 2025 Key Cyber Essentials changes in April 2025: passwordless authentication, updated terms, and enhanced security. Stay compliant with Noble IT’s... [Cyber Security](https://noble-it.co.uk/blog/tag/cyber-security) [Professional Services](https://noble-it.co.uk/blog/tag/professional-services) [**Read more  »**](https://noble-it.co.uk/blog/cyber-essentials-2025) [![Introduction to Cyber Security: A Non-Technical User's Guide](https://noble-it.co.uk/hubfs/linkedin-shared-link%206.jpeg)](https://noble-it.co.uk/blog/introduction-to-cyber-security-a-non-technical-users-guide) #### [Introduction to Cyber Security: A Non-Technical User's Guide](https://noble-it.co.uk/blog/introduction-to-cyber-security-a-non-technical-users-guide) [Joseph Halstead](https://noble-it.co.uk/blog/author/joseph-halstead) : Sep 07, 2023 Master cybersecurity basics with our user-friendly guide. Learn to defend against common threats and browse securely online. [Cyber Security](https://noble-it.co.uk/blog/tag/cyber-security) [**Read more  »**](https://noble-it.co.uk/blog/introduction-to-cyber-security-a-non-technical-users-guide) [![Five Key Benefits of IT Managed Services for Small and Medium-Sized Businesses](https://noble-it.co.uk/hubfs/linkedin-shared-link%2013.jpeg)](https://noble-it.co.uk/blog/five-key-benefits-of-it-managed-services-for-small-and-medium-sized-businesses) #### [Five Key Benefits of IT Managed Services for Small and Medium-Sized Businesses](https://noble-it.co.uk/blog/five-key-benefits-of-it-managed-services-for-small-and-medium-sized-businesses) [Joseph Halstead](https://noble-it.co.uk/blog/author/joseph-halstead) : Sep 08, 2023 Unveiling SMB growth: IT managed services for cost-efficiency, robust security, scalability, and cutting-edge tech expertise. [Professional Services](https://noble-it.co.uk/blog/tag/professional-services) [**Read more  »**](https://noble-it.co.uk/blog/five-key-benefits-of-it-managed-services-for-small-and-medium-sized-businesses) Company Company - [About Us](https://noble-it.co.uk/about-us) - [Contact](https://noble-it.co.uk/contact) Services Services - [IT Support](https://noble-it.co.uk/services/it-support) - [Cyber Security](https://noble-it.co.uk/services/cyber-security) - [IT Management & Consulting](https://noble-it.co.uk/services/it-management-and-consulting) - [Tier 4 Service Escalation](https://noble-it.co.uk/services/tier-4-service-escalation) - [Unified Communications & Connectivity](https://noble-it.co.uk/services/unified-communications-and-connectivity) - [Disaster Recovery & Business Continuity](https://noble-it.co.uk/services/disaster-recovery-and-business-continuity) Resources Resources - [Blog](https://noble-it.co.uk/blog) - [Book 360 Review](https://noble-it.co.uk/book-360-review) Sign up for our Blog Sign up for our Blog [![Noble it\_Icon\_Black-1](https://noble-it.co.uk/hubfs/Noble%20it_Icon_Black-1.png)](https://noble-it.co.uk) - [Legal Notice](https://noble-it.co.uk/legal-notice) - [Privacy Policy](https://noble-it.co.uk/privacy-policy) - [Cookie Policy](https://noble-it.co.uk/cookie-policy) - Cookies © 2026 Noble IT [Linkedin](https://uk.linkedin.com/company/nobleits) Return to top ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Adam Nichols", "url" : "https://noble-it.co.uk/blog/author/adam-nichols" }, "dateModified" : "2026-10-05T10:18:50.859Z", "datePublished" : "2026-10-05T10:18:50.000Z", "headline" : "SME Business Cyber Security: 2026 Breach Data", "image" : [ "https://noble-it.co.uk/hubfs/small-business-cyber-security-breaches-survey-2026-noble-it.jpg" ], "mainEntityOfPage" : { "@id" : "https://noble-it.co.uk/blog/small-business-cyber-security-breaches-survey-2026", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://noble-it.co.uk/hubfs/Noble%20it_Black_Green.png" }, "name" : "Noble IT" } } ```