Direct cost of most disruptive breach 2022

In a survey, conducted in the United Kingdom between October 2021 and January 2022, it was found that the average direct cost of the most disruptive breach among large businesses amounted to 4,050 British pounds. The survey respondents were UK businesses that had identified any cyber breach or attack in the last 12 months. The same survey revealed that micro and small businesses reported an average direct cost of 316 British pounds.
In the survey, large businesses are identified as having 250 employees or more, medium businesses have 50 to 249 employees, small businesses - with 10 to 49 employees, and micro-businesses were those having 1 to 9 employees.

Average short-term direct cost of the most disruptive cyber security breach for businesses in the United Kingdom (UK) as of 2022 (in GBP)

Characteristic	Average cost in GBP
Medium/large businesses	4,050
Micro/small businesses	316
All businesses	479

Loading statistic...

Download

Source

Show detailed source information?

Already a member?

Sources

Use Ask Statista Research Service

Release date

March 2022

More information

Region

United Kingdom

Survey time period

October 16, 2021 to January 21, 2022

Number of respondents

1,243 respondents

Special properties

among UK businesses that identified a breach or attack in the last 12 months

Method of interview

Telephone interview

Supplementary notes

The source adds the following information: 'Survey respondents are 1,243 UK businesses; 696 micro firms, 264 small firms, 149 medium firms, and 134 large firms.
For businesses, analysis by size splits the population into micro businesses (1 to 9 employees), small businesses (10 to 49 employees), medium businesses (50 to 249 employees), and large businesses (250 employees or more).
We undertook a random probability telephone survey of 1,243 UK businesses, 424 UK registered charities, and 420 education institutions from 16 October 2021 to 21 January 2022.
We carried out 35 in-depth interviews between December 2021 and January 2022, to gain further qualitative insights from some of the organizations that answered the survey. Sole traders and public-sector organizations were outside the scope of the survey. In addition, businesses with no IT capacity or online presence were deemed ineligible. These exclusions are consistent with previous years, and the survey is considered comparable across years.'
This statistic using original data from the Government Digital Service and includes copyright material licensed under © Crown, the Open Government License v3.0

Citation formats