Record number of cyber incidents reported to UK privacy regulator
UK organizations report record cyber incidents to ICO, driven by data extortion and AI.
British organizations have reported a record number of cyber incidents to the UK's Information Commissioner's Office (ICO) this year, with a quarterly high of 1,371 incidents between July and September. Industry sources attribute the surge to data extortion tactics and the increasing use of artificial intelligence in attacks. While ransomware reports to the ICO are generally falling, data from leak sites indicates a rise in ransomware and data-theft extortion, with a significant increase in British organizations being named as victims.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Sophos?
Get an email when a new story names Sophos, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonBritish organisations reported a record 1,371 cyber incidents to the ICO in a single quarter, driven by data extortion tactics and AI-enhanced attacks. The surge suggests that attackers are increasingly prioritising data theft over encryption, knowing that regulatory reporting obligations and reputational damage create powerful leverage. Many organisations may be under-reporting to regulators while still appearing on ransomware leak sites, indicating a gap between actual compromise rates and formal disclosure. This matters because under-reporting delays sector-wide threat intelligence sharing and leaves other organisations exposed to the same attack vectors.
What helps against this
How we list vendors
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Qilin
- malware — The Gentlemen
- malware — n0n