ONE year after its creation, the UK’s Cyber Monitoring Centre (CMC) is looking to expand to the US. The UK-based nonprofit was established by a team of experts in February 2025 to assess the economic and financial impact of major cyber incidents in the UK.
In 2025 the CMC analysed two major events: a spring 2025 cyber-attack targeting Marks & Spencer and the Co-op, categorised as a single ‘Category 2’ incident with a financial loss between £270m and £440m (median £355m), and a cyber incident affecting Jaguar Land Rover in August, which was described as the costliest cyber-attack impacting the UK economy with estimated losses between £1.6bn and £2.1bn (median £1.9bn).
At a 2025 Year In Review event in London on 16 March, Ruth Goodwin, head of operations and partnerships at the CMC, confirmed that establishing a US Cyber Monitoring Center was part of the roadmap for 2026, with conversations ongoing to appoint a technical committee and set up a US legal entity; she noted that some data providers are already global, which would facilitate collecting information on the financial impact of cyber-attacks in the US, and that the US centre should be officially established in 2027.