Business & Technology
UK cyber survey shows stagnant breach preparedness
SHANNON WILLIAMS
News Editor
The UK Government has released its Cyber Security Breaches Survey 2026, prompting criticism from security specialists and legal experts who say progress remains limited.
The annual survey tracks the frequency and impact of cyber incidents across organisations of different sizes and sectors. It also examines how businesses and charities approach risk management, staff training and supply chain security.
Initial industry reaction points to what many describe as stagnation in key measures of preparedness, with phishing, supplier vulnerabilities and the position of smaller firms emerging as particular concerns.
Tom Kidwell, co-founder of security firm Ecliptic Dynamics and a former British Army and UK Government intelligence specialist, said the 2026 results suggest too few lessons have been learned from recent attacks on well-known consumer brands.
“After years of headline-grabbing cyber attacks, this survey feels depressingly familiar. Breach levels haven’t shifted, preparedness hasn’t improved, and despite all the noise around breaches causing serious damage to major brands like Marks and Spencer and the Co-Op, too many organisations are still failing to act. Talking about cyber security clearly isn’t the same as doing anything meaningful about it. Too many companies are still in the mindset that ‘it won’t happen to me.'”
Phishing remains the most commonly reported form of attack in the government study. Security practitioners argue that attackers are using increasingly sophisticated and targeted methods, often supported by artificial intelligence tools.
For Kidwell, the survey exposes a disconnect between the scale of the phishing threat and current investment in staff awareness programmes.
“What really stands out is phishing. It continues to dominate, and it’s becoming smarter, more targeted and more damaging thanks to advances in AI, yet the Government’s Cyber Security Breaches Survey shows that staff training levels remain considerably low. When fewer than one in five organisations train their people, it’s no surprise attackers keep walking straight through the front door,” he said.
Experts also single out supply chain exposure. The survey shows relatively low levels of structured risk assessment of immediate suppliers, despite a series of high-profile disruptions.
“The same applies to supply chain attacks. Despite Jaguar Land Rover hitting the headlines last year with one of the most significant supply chain attacks, amounting to almost £500m in losses, a measly 15% of companies review risks associated with their immediate suppliers. This is creating a glaring blind spot, one that attackers are increasingly exploiting,” Kidwell said.
Smaller organisations appear to be under particular pressure. The latest figures suggest some modest gains in basic security practices recorded in previous years have not been sustained.
“Small businesses are the biggest concern. Last year’s modest improvements in basic cyber hygiene have gone into reverse, with fewer risk assessments, fewer policies and weaker continuity planning. Companies appear to be abandoning the bare minimum required to keep their businesses secure,” Kidwell said.
Government awareness efforts receive some recognition from specialists, but they argue that publicity and campaigns have yet to translate into sustained improvements in resilience.
“Government campaigns such as the Cyber Aware campaign are being recognised a little more, which is encouraging, but awareness alone is clearly not building resilience. Until cyber risk is treated as a practical business issue, and not a compliance tick-box exercise, these numbers in the annual Cyber Breaches Survey won’t change,” Kidwell said.
He also questioned the wider response from law enforcement and government agencies to rising levels of cyber crime, arguing that better organisational defences must be matched by stronger efforts to disrupt the groups behind attacks.
“While awareness is clearly important and businesses need to play their role, a question to ask is how is the Government tackling this wave of crime? With such prevalence of the activity, what is being done to disrupt the actors conducting it? Defensive and preventative actions can only go so far, upstream disruption is required alongside this,” Kidwell said.
Legal specialists view the survey as further evidence of a gap between the severity of cyber risk and the way many boards approach the issue. They also point to nation-state threats and the complexity of global vendor networks as added pressures on governance.
Ross McKean, co-chair of the UK Data Protection and Cyber Response Practise at DLA Piper, said:
“While some welcome progress has been made, today’s figures show a persistent gap between the potential existential nature of cyber threats and board-level engagement, especially across smaller businesses. With nation state threat actors increasingly targeting Western organisations and global supply chains becoming ever more interconnected, there is a pressing urgency to close this gap, including by ensuring businesses consistently identify, assess and prepare for vulnerabilities across their third-party vendor networks and take steps to defend against new technologies such as AI which potentially render current vulnerability patching practices redundant.”
McKean argued that boards should incorporate cyber considerations into broader resilience planning and crisis management, with clear priorities for keeping critical functions running after an incident.
“As a first step, all organisations, no matter their size, should have a clear picture of their ‘minimum viable business’ and urgently establish tested and effective workarounds that allow them to keep going should primary systems be offline. Fundamentally cyber risk is a business resilience, board level consideration,” McKean said.
Bicester is seeing a surge in demands thanks to a blend of premium retail at Bicester Village, strong rail connectivity, and easy access to Oxford and London.
New data from the digital rail ticketing platform TrainPal shows the destination experiencing sustained growth, as travellers increasingly look beyond traditional tourist hotspots.
READ MORE: Cherwell planning authority keeps control of 69 live major applications
It’s ranked among other locations, including Salford, at the top spot, Hatfield, St Albans, and London.
Destinations experiencing the strongest growth in rail demand, highlighting a growing appetite for places that combine strong transport links, cultural attractions, food scenes, outdoor experiences and value for money.
Alvaro Ungurean, European commercial director, said the trends show travellers prioritising destination that offer “memorable experiences, easy accessibility, and a strong sense of place.”
SOFIAH NICHOLE SALIVIO
News Editor
Venture Forge has appointed Stephen Kenwright as Fractional Chief Commercial Officer, adding the former Rise at Seven executive to the Yorkshire Amazon agency’s leadership team.
At the 21-person company, Kenwright will lead new business and marketing as Venture Forge develops its commercial strategy and expands its market presence. The appointment comes as the agency prepares to support client brands through Amazon Prime Day, a key trading period for sellers on the platform.
Founded in 2018 by former Heads of E-Commerce Andrew Banks and Jonathan Newton, Venture Forge helps consumer brands sell through Amazon. Its clients include Thermos, VAX, John Cotton and Glen Dimplex.
Kenwright brings nearly two decades of experience in commercial, digital and agency leadership. He founded Rise at Seven in 2019 and helped grow the business to annual revenues of more than £7 million, with 110 employees across Sheffield, Manchester, London and New York, before leaving after three years.
He also founded SearchLeeds and now works as a non-executive director and business development consultant for several agencies. His work has been recognised by Business Insider’s 42 Under 42 and The Drum.
Growth plans
The hire reflects Venture Forge’s efforts to strengthen its leadership team as the business grows. The agency has built its position by advising consumer brands on Amazon sales, operations and profitability.
The role adds dedicated senior oversight of commercial development beyond the two founders, marking a shift from a founder-led growth model to a broader management structure as the business expands.
Kenwright said he had not expected to take on another CCO role.
“I had no plans to return to the fray in a CCO role, but the opportunity with Venture Forge was too good to pass up.
“I was excited to get deep into Amazon, since I feel like I’ve only scratched the surface in my previous companies. Working with Andy and Jonathan, who’ve been friends of friends for a long time and experienced retailers in their own right, has been a great experience over the last few weeks.”
“Most of all, it feels like an agency in its ascendency, and one where I can make a significant difference.”
Founders’ view
Andrew Banks, Founder and Managing Director of Venture Forge, said the appointment reflects both Kenwright’s background and the stage the company has reached.
“Stephen isn’t a stranger. He’s someone Jonathan and I have known of and rated for years.
“So this was never just about hiring a CCO. It’s about the right person arriving at exactly the right moment: the point where our commercial ambition has outgrown what two founders can carry alone.
“Having an operator of his pedigree choose us tells us everything about where Venture Forge is heading.”
The recruitment also reflects continued demand for specialists in marketplace commerce, particularly among consumer brands seeking stronger sales on Amazon. Agencies in this segment have benefited as manufacturers and retailers devote more attention to direct marketplace performance, advertising and fulfilment economics.
Prime Day remains one of the most important points in the Amazon trading calendar, often driving a surge in promotional activity, stock planning and advertising spend among brands. For agencies serving that market, the period can act as both a test of operational readiness and a source of new client demand.
Both founders previously held Head of E-Commerce roles before setting up the business. As Banks put it, the company has reached “the point where our commercial ambition has outgrown what two founders can carry alone.”
In an open letter, sent to Oxfordshire County Council, a group led by estate agent Savills and including developers and university colleges, has predicted a hit to new home delivery and business funding if new parking standards are not dropped soon.
They also said the new rules may lead to existing communities being charged to park on the street, outside their own homes.
READ MORE: Probe launched into quality of Oxford Brookes University’s banking course
Delivered on Wednesday, June 17, the letter was signed by David Jackson, director at estate agents Savills, on behalf of Oxford University Development, as well as Brasenose, Christ Church, Exeter, Magdalen, New, Nuffield and St John’s colleges.
The university and colleges are involved in a number of building projects around the city including Begbroke and Oxford North innovation districts, and 1,450-home Bayswater Brook.
In addition, developers Bellway Homes, Catesby Estates, Dorchester Residential Management and Greencore Homes were also signatories.
The group stressed that they support the council’s overall transport objectives including reducing car usage and increasing active travel but are “deeply concerned” about the 2026 standards.
These were adopted at a council meeting on April 21, and it was proposed they should apply to the entire county.
In his letter, Mr Jackson highlighted the introduction of a new category for residential development ‘Car Light’ and changes to the previously existing ‘Car Free’ communities.
‘Car Light’ is a new distinction for which a reduced level of parking provision is mandated, with 50 per cent of parking required to be on the street.
The tweaks to the ‘Car Free’ communities, which will see acceptable walking distances increased, would significantly extend the area in which new homes will have to be built with no parking provision.
The leader of Oxfordshire County Council denied the new parking standards were about being “anti-car”.
Tim Bearder said: “Oxfordshire is being asked to accommodate very significant housing and employment growth over the coming decades, but we cannot endlessly widen roads or build ever more parking spaces.”
The Liberal Democrat explained that if car use grows unchecked, congestion will worsen, creating difficulties for those who have no alternative to driving.
In addition, parking spaces take up land and reduce the number of homes that can be delivered.
Mr Bearder, who was named leader only last month, said transport had to be balanced, with developments prioritised for areas where public transport is an option.
“If we fail to plan for that now,” he said, “the scale of growth being imposed on Oxfordshire will overwhelm a transport network that is already under considerable pressure”.
However, Mr Jackson and those behind him have made dire warnings following the introduction of the 2026 standards and have called on the local authority to withdraw them and undertake a full and open consultation on how the previous rules might be adapted.
If left, the group warned the measures would “undermine, or at the least significantly delay, the delivery of much-needed homes” including affordable properties.
READ MORE: Party atmosphere in Oxford as England win FIFA World Cup opener
They added: “They are likely to give rise to a withdrawal of investment from new business and commercial spaces consequent on the drop in the attractiveness of Oxfordshire as a location for businesses to move to.”
In addition, existing communities may well be impacted, said Mr Jackson, as a requirement for ‘Car Free’ projects will be that Controlled Parking Zones will be introduced into communities near developments to manage the risk of overspill parking in roads next to developments.
He said: “This will have the effect of requiring residents in those neighbouring communities to pay an annual fee to park on street.”
-
Crime & Safety4 weeks agoRyan Bridge speaks of London arrest after Oxford incident
-
Crime & Safety4 weeks agoNew video call system to help domestic abuse victims
-
Oxford News3 weeks agoOxfordshire families invited to free day of fun in Bicester
-
Oxford News4 weeks agoOxfordshire Lib Dems lose another councillor amid ‘serious concerns’
-
Crime & Safety3 weeks agoPhotos as 1979 Pontiac Firebird ‘bursts in flames’ at Tesco
-
Business & Technology3 weeks agoNew ‘high-quality’ mushroom business launched in Oxford
-
Business & Technology3 weeks agoNHS IT outages disrupt 274,620 patient interactions
-
Oxford News3 weeks agoOxford pub plans roof refurbishment for listed building