UK’s corporate and government leaders urged to act as cyber threats reach new heights

Leading UK companies face a surge in cyber attacks, prompting government calls for immediate action to protect vital sectors amid rising threats including ransomware, domain spoofing, and DDoS campaigns.

Bosses of the UK’s leading companies are being urged to urgently bolster their defences against cyber attacks, as the scale and severity of incidents reached unprecedented levels. Technology Secretary Liz Kendall has called on chief executives to take “immediate action” following a sharp increase in cyber attacks affecting major household names including Marks and Spencer, Co-op, and Jaguar Land Rover. The government has now sent letters to FTSE350 company leaders and chairs, emphasising the critical need for collaboration between government and industry to protect the UK’s economy.

According to the National Cyber Security Centre (NCSC), part of GCHQ, there were 204 nationally significant cyber attacks in the 12 months to August 2025—more than double the 89 incidents reported the previous year. NCSC chief executive Richard Horne highlighted a 50% rise in highly significant attacks, underscoring the growing threat to critical sectors such as government, essential services, and the broader economy. These attacks have led to substantial financial and operational impacts. For instance, Jaguar Land Rover reportedly suffered losses of around £50 million per week during a six-week shutdown caused by a cyber incident. Horne warned that “cyber security is now a matter of business survival and national resilience,” urging business leaders to regard cyber defences as a top boardroom priority.

The government’s letters, signed by senior ministers and heads of security agencies, urge executives to adopt concrete actions including designating cyber resilience to board-level responsibility, signing up to the NCSC’s early warning system, and implementing the Cyber Essentials scheme to secure supply chains. For smaller firms and sole traders, the NCSC has recently launched a cyber action toolkit designed to assist them in adopting basic but crucial security measures. Experts stress that while larger companies face significant risks, smaller suppliers remain particularly vulnerable and can become entry points for wider disruptions within supply chains.

Adding further complexity to the threat landscape is the surge in ransomware activity. Recent reports document a 57% rise in active ransomware groups from 49 in the third quarter of 2024 to 77 in the same period of 2025. Although the number of quarterly victims has remained steady, the diversification and fragmentation of threat actors—including newer groups like IncRansom and SafePay—complicates defence efforts. The UK remains a frequent target, alongside the US and Germany, with attacks concentrating on industries such as manufacturing, technology, and legal services. This evolving ransomware ecosystem requires businesses to maintain highly adaptive and vigilant security postures.

Another growing concern for UK firms involves sophisticated lookalike domain attacks, which deceive users by impersonating legitimate websites with minor alterations to domain names. These attacks target key sectors including logistics, finance, legal services, and healthcare, often resulting in substantial financial losses per incident, sometimes exceeding £160,000. Because these domains are visually indistinguishable from authentic ones, they can bypass standard email filters and exploit human psychology, making detection difficult. Experts advocate for machine learning-assisted domain monitoring, employee training, rapid response mechanisms, and collaboration with cybersecurity partners as essential countermeasures.

In parallel, Distributed Denial of Service (DDoS) attacks have escalated in intensity despite becoming shorter in duration. Nokia’s latest threat intelligence report warns of terabit-scale attacks occurring at unprecedented volumes, frequently leveraging compromised home internet devices globally. These attacks target critical telecom and data infrastructure, presenting an acute risk to operational continuity amid increasingly complex supply chains. Efforts to combat these threats include deploying AI-based detection tools and embedding advanced DDoS protections directly into network infrastructures.

The situation is further exacerbated by emerging vulnerabilities in widely used enterprise software. For instance, Oracle issued an emergency patch in October 2025 for a critical flaw in its E-Business Suite, exploited by the Cl0p ransomware gang to conduct extortion attacks. Despite the patch release, experts caution that many affected systems remain unpatched, leaving organisations exposed to data breaches and ransomware payments. The FBI and UK’s NCSC have urged immediate patching and heightened monitoring of potentially compromised environments.

Beyond corporate targets, public sector bodies have also faced intensified cyber threats. UK Research and Innovation (UKRI) reported over 5 million cyber attacks in 2025 alone—a 600% increase from the prior year. These attacks include phishing and malware campaigns aimed at damaging IT infrastructure or stealing sensitive information. Cybersecurity professionals note that the rapid emergence of AI-driven threats is accelerating the volume and sophistication of attacks across both public and private sectors, reinforcing the imperative for enhanced readiness and resilience.

Collectively, these developments paint a stark picture of a UK cyber threat environment growing more complex, aggressive, and detrimental to business operations and national security. The government’s call for leadership involvement at the highest corporate levels reflects the understanding that cyber defence is no longer solely a technical issue but a fundamental element of strategic business risk management. As cyber adversaries diversify their tactics—from ransomware proliferation and domain spoofing to intensified DDoS campaigns and exploitation of software flaws—UK organisations of all sizes must rapidly elevate their cyber preparedness to safeguard their assets, reputations, and the wider economy.

📌 Reference Map:

Source: Noah Wire Services

Noah Fact Check Pro

The draft above was created using the information available at the time the story first
emerged. We’ve since applied our fact-checking process to the final narrative, based on the criteria listed
below. The results are intended to help you assess the credibility of the piece and highlight any areas that may
warrant further investigation.

Freshness check

Score:
9

Notes:
The narrative is current, published on October 14, 2025, and addresses recent cyber incidents affecting major UK companies. The earliest known publication date of similar content is October 13, 2025, with Reuters reporting a 50% rise in highly significant cyber incidents. ([reuters.com](https://www.reuters.com/world/uk/uk-warns-business-leaders-highly-significant-cyber-incidents-rise-50-2025-10-13/?utm_source=openai)) The report is based on a press release from the UK government, which typically warrants a high freshness score. No discrepancies in figures, dates, or quotes were found. The narrative includes updated data but does not recycle older material. No republishing across low-quality sites or clickbait networks was identified. No similar content appeared more than 7 days earlier. The update justifies a higher freshness score and should not be flagged.

Quotes check

Score:
10

Notes:
The direct quotes from Technology Secretary Liz Kendall and NCSC chief executive Richard Horne are unique to this report. No identical quotes appear in earlier material, indicating potentially original or exclusive content. No variations in quote wording were found.

Source reliability

Score:
10

Notes:
The narrative originates from The Irish News, a reputable UK news outlet. The report is based on a press release from the UK government, which is a reliable source. No unverifiable entities or fabricated information were identified.

Plausability check

Score:
10

Notes:
The claims about the rise in cyber incidents and the government’s response are consistent with recent reports from reputable sources. The narrative includes specific details, such as the £50 million weekly loss suffered by Jaguar Land Rover during a six-week shutdown, which are corroborated by other reports. ([reuters.com](https://www.reuters.com/world/uk/uk-warns-business-leaders-highly-significant-cyber-incidents-rise-50-2025-10-13/?utm_source=openai)) The language and tone are consistent with official communications. No inconsistencies or suspicious elements were found.

Overall assessment

Verdict (FAIL, OPEN, PASS): PASS

Confidence (LOW, MEDIUM, HIGH): HIGH

Summary:
The narrative is current, based on a recent government press release, and includes unique quotes from reputable sources. The claims are consistent with other reputable reports, and no inconsistencies or suspicious elements were found.