Almost half of UK businesses say they’ve experienced cyber security issues in the past year
Government figures show 46% of businesses have dealt with cyber security breaches or attacks in the past 12 months. And a third (32%) of those said they experienced issues at least once a week in 2020.
Breaches can lead to substantial costs
Of those businesses that have experienced breaches or attacks, one in five (19%) have lost money or data as a consequence, and two in five (39%) were negatively impacted in other ways. The average cost to address breaches was £3,230 overall and £5,220 for medium and large firms.
Covid-19 has led to more cyber crime
The National Cyber Security Centre estimates it has dealt with 10% more incidents in the year to 31 August 2020. Experts say the increase in employees working from home has created more chances for attackers to find and exploit vulnerabilities.
Almost all security breaches are down to human error
According to data from the ICO, 90% of UK data breaches in 2019 were down to human error, an increase on the previous two years. But almost a quarter of UK organisations (22%) do not provide their employees with regular training.
Unauthorised disclosure is one of the most common privacy complaints made to regulators
That can be as simple as not using bcc when sending out emails to long lists of people, but also covers identification protocols. 1 & 1 Telecom Gmbh was fined €9,500,000 (later reduced to €900,000 on appeal) for only requiring name and date of birth to gain entry to customer information, for example; and an NHS Trust was fined £180,000 after a sexual health centre mistakenly disclosed the details of nearly 800 patients by not using the bcc function.
High price to pay for ignoring unsubscribe requests
Just Eat and Vodafone were fined for continuing to send marketing emails after users had unsubscribed and ClickQuickNow paid out £40,000 because its withdrawal of consent mechanism was deemed too complicated.