Derbyshire businesses face £195,000 average cost from cyber attacks, new government research reveals
Local cyber security expert responds to landmark research showing over 600,000 UK businesses hit by cyber breaches in past year. New government-commissioned research published today reveals that the average UK business faces costs of almost £195,000 from a significant cyber attack, with 43% of UK businesses, over 600,000 organisations, experiencing a cyber security breach or attack in the past year alone.
The independent research, commissioned by the Department for Science, Innovation and Technology (DSIT) and published on 12 November 2025, highlights that the UK is the most targeted country for cyber attacks in Europe, with cyber incidents costing the UK economy £14.7 billion annually.
Kevin Walker, founder of Black Swan Cyber Security Solutions in Chesterfield, said: "These figures should be a wake-up call for every business in Derbyshire. When we think about £195,000 in costs, for many local trades businesses, care homes and schools, that's catastrophic. But the research also shows us something empowering: businesses with Cyber Essentials in place make 92% fewer insurance claims."
The scale of the threat
The research reveals that the National Cyber Security Centre (NCSC) managed 204 significant or highly significant cyber incidents in the year leading up to September 2025, equivalent to one major incident every two days. These are incidents defined as having serious impacts on essential services, public safety or economic stability.
Recent high-profile attacks have severely disrupted major retailers including Marks and Spencer and the Co-op. In 2024, a ransomware attack on an NHS supplier led to the disruption of over 10,000 appointments and thousands of procedures.
"What we're seeing in the headlines, the NHS disruptions, major retailers going down, that's not happening to faceless corporations," added Kevin. "These are the services Derbyshire families rely on every day and the same vulnerabilities exist in our local businesses."
Sector-specific impacts
The government research shows that some of the UK's most competitive sectors face the highest average costs from cyber attacks:
- Information sector: £337,000
- Management sector: £334,000
- Manufacturing: £330,000
- Financial services: £309,000
The consumer impact
Further research estimates that 437,000 people became victims of fraud in 2023 due to data breaches that took place in organisations they trusted with their personal information. This represents approximately 11% of all fraud victims in England and Wales, with an estimated cost of £755 million annually.
"When a Derbyshire business experiences a data breach, it's not just their problem," said Kevin. "It's their customers' problem, their staff's problem their community's problem. The research makes clear that our responsibility goes beyond our four walls."
A positive response for local businesses
Despite the stark figures, Kevin emphasised that practical, cost-effective protections are available. The government's Cyber Essentials scheme, a set of five basic technical controls, has seen strong uptake, with over 51,000 certificates issued in the 12 months to June 2025.
"The research shows that 92% fewer insurance claims are made by organisations with Cyber Essentials controls in place," said Kevin. "For Derbyshire businesses, this isn't about becoming IT experts. It's about taking proven, practical steps that work."
Black Swan Cyber Security Solutions specialises in helping local SMEs, schools and care homes achieve Cyber Essentials certification, with a focus on making cyber security accessible and understandable for non-technical business owners.
The full government research, including five independent reports from KPMG, Alma Economics, and Frontier Economics, is available at gov.uk/government/publications.