Long-term cost of the most disruptive breach UK 2023

A survey conducted in the United Kingdom between December 202 and January 2023 found that the average long-term cost of the most disruptive breaches for medium and large businesses amounted to 1,260 British pounds. The survey was conducted among UK businesses that identified their most disruptive breach or attack in the last 12 months. In the case of micro and small businesses, the average long-term cost of the most significant breach or attack was 80 British pounds.

Average estimated direct long-term cost of the most disruptive cybersecurity breach for businesses in the United Kingdom (UK) as of 2023 (in GBP)

Characteristic	Average cost in GBP
Medium/large businesses	1,260
Micro/small businesses	80
All businesses	150

Loading statistic...

Download

Source

Show detailed source information?

Already a member?

Sources

Use Ask Statista Research Service

Release date

April 2023

More information

Region

United Kingdom

Survey time period

September 27, 2022 to January 18, 2023

Number of respondents

2,263 respondents

Special properties

among UK businesses that identified any breaches or attacks in the last 12 months

Method of interview

Telephone interview

Supplementary notes

The source adds the following information: 'Survey respondents are 1,243 UK businesses; 696 micro firms, 264 small firms, 149 medium firms, and 134 large firms.
For businesses, analysis by size splits the population into micro businesses (1 to 9 employees), small businesses (10 to 49 employees), medium businesses (50 to 249 employees), and large businesses (250 employees or more).
We undertook a random probability telephone survey of 1,243 UK businesses, 424 UK registered charities, and 420 education institutions from 16 October 2021 to 21 January 2022.
We carried out 35 in-depth interviews between December 2021 and January 2022, to gain further qualitative insights from some of the organizations that answered the survey. Sole traders and public-sector organizations were outside the scope of the survey. In addition, businesses with no IT capacity or online presence were deemed ineligible. These exclusions are consistent with previous years, and the survey is considered comparable across years.'
This statistic using original data from the Government Digital Service and includes copyright material licensed under © Crown, the Open Government License v3.0

Citation formats