Major UK Cyber Incidents – June 2025

HMRC Phishing Scam – £47 Million Hit A sophisticated phishing campaign targeted 100,000 UK taxpayer PAYE accounts, extracting £47 million in fraudulent payouts. Though HMRC’s systems weren’t compromised, the attackers used stolen data from other breaches—a classic credential phishing tactic—and relied heavily on social engineering. Victims were protected, but the attack highlights the grip phishing holds […]
UK Information Commissioner’s Office Cracks Down on Lax Security Controls

The Information Commissioner’s Office (ICO) is stepping up enforcement against organisations failing to implement essential cyber-defences. Here’s a sharp overview of the latest actions, especially focused on the absence of security measures like Multi-Factor Authentication (MFA), patching, and access controls. Major Fines for Weak Authentication Advanced Computer Software Group Ltd (a supplier to the NHS) […]
Key Insights from the NCSC’s Cyber Security Breaches Survey 2025

Breaches Slightly Down—But Threat Volumes Rising Phishing Still Dominates Medium & Large Businesses Under Persistent Fire Cyber Hygiene Shows Signs of Improvement Ransomware Becoming More Common & Costlier Institutional & Educational Sector Highlights What This Means for You Boosting Your Cyber Resilience Is your organisation at risk just because you haven’t spotted it yet? Don’t […]