“Today’s reliance on digital and online services has led to a new threat for businesses: the risk of cyber-attacks and data breaches.
A cyber-attack can instantly bring your operations to a halt, leaving systems locked and inaccessible. The consequences? Lost time, lost revenue, missed contracts and dissatisfied customers. You also face risks if you store customer, employee or supplier data, or handle online payments.
Recent government figures reveal that 43 per cent of businesses reported experiencing a cyber breach or attack in the past year.
The 2025 Cyber Security Breaches Survey found that 35 per cent of micro businesses and 42 per cent of small businesses were affected by phishing attacks, the most common and disruptive type of cyber threat.
Phishing typically involves fraudulent emails, texts, phone calls or websites that appear genuine but are designed to trick you into revealing sensitive information such as passwords or financial details.
With artificial intelligence now helping criminals craft convincing, personalised messages, the old ‘spot the bad grammar’ trick is no longer reliable.
So, what can you do? First, make sure you have robust cyber security software in place. Equally important is ensuring that you and your team are alert to the risks and take practical steps: use strong passwords and multi-factor authentication, keep your security software up to date and regularly back up important data and contacts.
Many businesses are investing in cyber insurance to protect themselves from digital threats. The Cyber Security Breaches Survey found that almost half of all businesses (45 per cent) now have some form of cyber insurance, with uptake among small businesses at 62 per cent and even higher among medium-sized businesses at 65 per cent.
Cyber insurance works much like theft cover on a property policy: even if you have the best locks, insurance gives you peace of mind that you can recover quickly and avoid major costs after an attack.
A good policy provides immediate access to IT specialists, legal advisors and crisis communications experts. It also covers data restoration, system recovery, and business interruption, covering costs incurred due to an attack or breach.
In the worst-case scenario of a ransomware attack, cyber insurance can provide expert negotiators and legal guidance, though paying a ransom is never guaranteed to restore your data.
Importantly, the right policy also protects you against third-party claims if customer or booking data is compromised.
Insurers want to see that you’re proactive about managing cyber risk. By taking steps to protect your business, you can reduce your premiums and improve your security.
In short, if your business would suffer without its tech, cyber insurance is a smart safety net for the digital age.”
Carlisle-based H&H Insurance Brokers works with businesses across Cumbria and is a strategic partner of Cumbria Tourism. The firm operates across the North of England and the South of Scotland.
To find out more about choosing the right insurance for your business, contact Kara at kjenkinson@hhib.co.uk or call 01228 406290.