Cyber threats continue to loom large for UK businesses in 2025, with a notable shift in focus towards often-overlooked vulnerabilities. While external attacks like ransomware and phishing remain prevalent, the critical role of insider threats in data loss is now undeniable. Here, Debra Cairns, MD of Net-Defence, provides a clear overview of the current cyber threat landscape, and offers businesses the tools to navigate it with renewed confidence.
With recent reports indicating that over 70% of data loss incidents are caused by careless or malicious insiders, and countless incidents remaining unreported, the urgent need for robust internal security measures across all sectors is more prevalent than ever.
“Businesses are rightly concerned about external attackers, but they mustn’t lose sight of the dangers lurking within their own organisations,” says Debra. “Whether it’s an employee inadvertently making a mistake or acting with malicious intent, the consequences of data loss are equally devastating for businesses of all sizes.”
Indeed, a staggering 85% of organisations worldwide experienced at least one data loss event in the past year, with the UK figure at 73%. Alarmingly, 70% of these incidents were attributed to human error or negligence. This highlights that, at its core, data loss is a human problem, exacerbated by the fact that many cyberattacks, such as phishing, rely on human interaction to succeed.
Debra elaborates: “Simple errors are widespread. Approximately one third of employees admit to sending an email to the wrong recipient, and for an organisation with 500 employees, that could mean around 340 misdirected emails a year, many containing sensitive attachments. These seemingly small mistakes can lead to reputational damage and financial penalties.”
Beyond internal vulnerabilities, external threats are also evolving rapidly, particularly with the increased use of AI by cybercriminals. AI-powered tools are enabling individuals with minimal technical expertise to execute sophisticated attacks.
“The old tricks we used to spot a scam email are long gone,” Debra warns. “Today’s cybercriminals are using AI to craft truly convincing phishing messages, making them incredibly difficult to detect. This constant arms race between security professionals and attackers means individuals must stay vigilant and proactive.”
Debra concludes: “The only surefire way to protect your sensitive data and make sure your business can continue to operate in the face of an attack is to know exactly what your vulnerabilities are and address them. These differ across every sector and size of business, and that’s exactly why we’ve launched our Business Resilience as a Service packages.
“By empowering businesses to pick and choose which services they need, we’re giving them the tools to take a more proactive stance, rather than a reactive one. Ultimately, this kind of proactivity is the only way to prevent costly breaches, safeguard clients & staff and protect your reputation for the long term.”
