What Is a Cyber Breach and What Should You Do?
A clear, direct answer to this question — written for UK business owners and IT decision-makers.
Direct Answer
A cyber breach is any incident where unauthorised parties access, steal, corrupt, or disrupt your business data or systems. 43% of UK businesses experienced a breach in the past 12 months. The average cost of the most disruptive breach is £3,550 — rising to £8,260 where data or money was lost. Immediate steps: isolate affected systems, contact your IT provider, report to Action Fraud, and notify the ICO within 72 hours if personal data was compromised.
Key Points
What you need to know.
The Short Answer
A concise overview of what you need to know.
For UK Businesses
How this applies specifically in the UK context.
Cost Considerations
What to expect in terms of investment and ongoing costs.
Next Steps
What you should do with this information.
Quick Comparison
| Feature | Option A | Option B |
|---|
Frequently Asked Questions
The average cost of the most disruptive breach is £3,550 for UK businesses. For businesses that experienced negative outcomes such as data loss or financial theft, the average cost rises to £8,260. Medium and large businesses face average costs of £10,830 per disruptive incident.
The first hour after detection is considered the golden hour that determines outcome severity. Organisations that detect breaches internally save an average of $900,000 in costs. Only 22% of UK businesses have a formal cybersecurity incident management plan in place.
MFA requires two or more verification methods to access an account. Microsoft reports that over 99.9% of compromised accounts did not have MFA enabled. Only 40% of UK businesses have two-factor authentication enabled (DSIT 2025). MFA can prevent more than 99.9% of account compromise attempts.
UK businesses typically allocate 13.2% of their total IT budget to cybersecurity. More than half of UK small businesses increased their cybersecurity spending in 2024. 85% of UK firms plan to boost their cyber budget for 2026. The cost of prevention is significantly less than the average breach cost of £3,550.
Yes. 50% of small businesses (10-49 employees) reported a cybersecurity breach in 2025. UK small businesses face around 65,000 hack attempts daily, with approximately 4,500 successful breaches. More than a quarter of SMBs say a single cyber attack could put them out of business entirely.
Need More Detail?
Speak to an AMVIA expert for advice tailored to your business.
Related Questions
What Is Ransomware?
Ransomware is the most financially damaging type of cyber breach — how it works and how to prevent it.
What Is Phishing?
Phishing is the most common cause of cyber breaches in UK businesses.
Cybersecurity Guide for UK SMEs
The controls that reduce your likelihood of a breach and your recovery time if one occurs.