Vodafone

UK SMEs are incurring annual losses amounting to £3.4 billion due to inadequate cybersecurity measures.

60% of UK SMEs allow employees to use their own IT equipment when working from home.

SMEs generate 25% of the UK's GDP.

6% of UK SMEs were targeted up to 10 times in a year.

SMEs account for 99.8% of the UK’s business population .

23% of UK businesses have been affected by ransomware .

20% of UK businesses have been impacted by Distributed Denial of Service (DDoS) attacks .

SMEs employ two-thirds of the UK workforce.

19% of UK remote workers are being targeted by cyber criminals .

28% of UK SMEs say that a single attack could put them out of business .

More than a third (35%) of UK SMEs experienced a cyber incident in 2024 alone.

More than a quarter (28%) of UK SMEs suffered between one and five attempted attacks.

More than half (52%) of UK SME employees have received no cybersecurity training.

More than one-in-eight (15%) UK SME employees have been banned from working from home due to the risk of falling victim to a cyber-attack .

More than a third of UK SMEs (38%) invest less than £100 a year in cybersecurity .

The average cost of a cyber-attack for UK businesses with 50 or more employees was £5,0011.

70% of UK firms have experienced phishing attempts.

More than two-thirds (64%) of UK SMEs have staff working from home or other off-site locations regularly .

The average cost of a cyber-attack for a small UK business was £3,3981.

32% of UK SMEs have no cybersecurity protections in place at all.