Thirty-two percent of businesses and 22 percent of charities are experiencing more cybersecurity attacks, the 2019 Cyber Security Breaches Survey says. 

The average annual cost for business that lost data or assets after breaches was more than $5,000 and more than $12,000 for charities. 

Among the 32 percent business and 22 percent of charities that identified breaches or attacks:

  • 32 percent of businesses and 29 percent of charities needed new measures to prevent future attacks. 
  • 27 percent of businesses and 32 percent of charities took up staff time dealing with breaches or attacks. 
  • 19 percent of businesses and 21 percent of charities had staff stopped from carrying out daily work. 
  • 48 percent of businesses and 39 percent of charities identified at least one breach or attack a month. 

Other key findings include:

  • 30 percent of businesses and 36 percent of charities have made changes to cybersecurity because of the GDPR, including adding new policies, adding extra staff training or communications, changing firewall or system configurations, creating new contingency plans and more. 
  • In 2018, only 27 percent of businesses had cybersecurity policies in place, compared to 33 percent in 2019. 
  • 21 percent of charities had cybersecurity policies in place, compared to 36 percent in 2019. 
  • 58 percent of businesses and 56 percent of charities that have cybersecurity policies in place created or reviewed them in the last six months. 
  • 31 percent of businesses and 32 percent of charities have done a cyber risk assessment in the last 12 months, compared to 24 percent and 20 percent, respectively, in 2018.