ESET

33% of UK SMBs say they have a dedicated cybersecurity specialist.

32% of UK SMBs say cybersecurity is part of an IT specialist’s broader role.

Among UK SMBs that outsource at least some cybersecurity responsibilities, 57% use an MSP or MSSP to provide security.

ClickFix became the second most common attack method after phishing.

ClickFix was responsible for nearly 8% of all blocked attacks in H1 2025.

Before disruption, Lumma Stealer activity in H1 2025 was higher than in H2 2024 (+21%).

49% of UK SMBs report experiencing a cyber incident in the past year.

UK SMBs take just over four weeks on average to identify and recover from a breach.

81% of UK SMBs say cyber warfare and global conflicts are a very real cyber threat that can impact their business.

86% of UK SMBs do not outsource any part of their cybersecurity responsibilities to an MDR service, MSP, or MSSP.

11% of UK SMBs say they partially outsource cybersecurity responsibilities to a third party.

3% of UK SMBs say they outsource all cybersecurity responsibilities to a third party.

Among UK SMBs that outsource at least some cybersecurity responsibilities, 21% also use their Managed Service Provider for MDR.

Among UK SMBs that outsource at least some cybersecurity responsibilities, 27% outsource security via a cyber insurer offering MDR.

Among UK SMBs that outsource at least some cybersecurity responsibilities, 16% outsource security via a vendor offering MDR.

55% of UK SMBs expect their cybersecurity budgets to increase in the next 12 months.

21% of UK SMBs say they have an internal Security Operations Centre (SOC) team.

NFC-based fraud spiked by more than thirty-five-fold.

Danabot activity was up even more, by +52%.

Yearly data from 2024 shows that while ransomware attacks and the number of active gangs have grown, ransom payments saw a significant drop

Android adware detections jumped 160%.

ClickFix, a new deceptive fake error attack vector, surged by over 500% compared to H2 2024 in ESET telemetry.