Cyber-Attacks on UK Firms Increase at Four Times Global Rate

Why It Matters

The accelerating attack rate threatens UK business continuity and highlights the urgent need for stronger cyber‑defence and AI governance. Ignoring these trends could amplify financial losses and regulatory scrutiny.

Key Takeaways

• UK cyber attacks rose 36% YoY, outpacing global 9.8%
• UK attack volume remains below global average of 2,086 weekly
• Ransomware groups Qilin, Clop, Gentlemen dominate UK victims
• 88% of firms using GenAI face high data‑exposure risk
• Organizations use average 11 GenAI tools, lacking governance

Pulse Analysis

The February 2026 threat landscape underscores a rapid convergence of UK cyber‑attack volumes with global norms. While the absolute number of incidents per organization remains lower than the worldwide average, the 36% year‑on‑year jump signals a closing gap that could erode the region’s historical security advantage. Sectors that store sensitive data—education, energy, government, healthcare and finance—are bearing the brunt, prompting executives to reassess perimeter defenses and incident‑response playbooks.

Ransomware continues to dominate the threat portfolio, with a concentrated set of actors responsible for most compromises. Groups such as Qilin, Clop and The Gentlemen together accounted for nearly 40% of UK ransomware victims in February, reflecting a trend toward specialization and higher ransom expectations. This concentration amplifies the impact of each breach, as victims face not only operational downtime but also potential regulatory penalties and reputational damage. Organizations must therefore prioritize real‑time threat intelligence and layered remediation strategies to disrupt these campaigns before encryption occurs.

A parallel, emerging risk stems from the unchecked proliferation of generative AI tools. Check Point reports that 88% of firms using AI experienced high‑risk data exposure, with one in 31 prompts containing sensitive information. The average enterprise now juggles eleven different AI applications, many operating without formal governance or security controls. This creates a fertile ground for inadvertent data leaks and supply‑chain attacks, especially when employees engage with foreign‑origin models. Implementing AI‑specific policies, continuous monitoring, and AI‑driven protection platforms can mitigate these novel vectors while preserving the productivity gains of generative AI.