UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling

The UK’s National Cyber Security Centre (NCSC) reports a record 429 cyberattacks were handled between September 2024 and August 2025, with 204 of them deemed nationally significant, more than double the 89 incidents recorded in the previous year. Of these 204 major cases, 18 were rated highly significant, threatening government, key services or the economy.

The NCSC’s Annual Review notes that overall threat activity continues to rise, prompting the government to urge top business leaders to strengthen cybersecurity measures. The report underscores that over half of the nationally significant incidents were categorised at the higher levels, signalling increasing exposure to severe impacts across national resilience and critical infrastructure.

In response, the government has launched efforts such as Cyber Essentials guidance and urged FTSE 350 companies to prioritise cyber resilience at board level. The findings come as Jaguar Land Rover recently faced a disruptive cyberattack, for which the government has announced a £1.5 billion support package, illustrating the tangible economic implications of rising cyber threats.