Just 11.5% of businesses in the East of England feel fully prepared to handle a cyber breach, new study claims.
Almost four in ten businesses across the East of England have experienced a cyber-security breach or data protection issue in the past 12 months, according to research from digital insurance provider Superscript.
According to Cyber-security in 2026: Risks, breaches and practical protection for UK businesses, the research provides a snapshot of how businesses across the UK are responding to an increasingly complex cyber threat landscape.
The report found that 39.8% of businesses in the East of England have experienced a cyber-security breach or data protection issue within the last year, underlining the growing prevalence of cyber incidents across organisations of all sizes.
Despite these risks, relatively few businesses feel fully prepared to respond. Just 11.5% describe themselves as “very prepared “ to handle a significant cyber-attack or data breach.
The findings suggest that while many businesses recognise cyber threats as a growing challenge, confidence in their ability to respond to a serious incident remains limited.
Financial concerns continue to dominate. More than a third of businesses (38.9%) identify financial loss or fraud as their biggest cyber-security concern, making it the most cited risk among respondents in the region.
Tori Butler, managing director, SME, at Superscript – which commissioned the report – said: “Cyber-attacks can affect any business, whether it’s a sole trader, a growing startup or a well-established company.
“The findings from the East of England show that cyber incidents are already affecting a significant proportion of businesses, yet relatively few feel fully prepared to deal with a major breach.”
“Financial loss is understandably the biggest concern for many business owners. But cyber incidents can also interrupt operations, affect customer relationships and create unexpected pressures at a time when businesses are already managing plenty of other challenges. “
The report says that cyber-security should be viewed as a core business risk rather than a purely technical issue.
Having the right preventative measures in place is important, but so too is having a clear plan for how to respond if an incident occurs.
Alongside new research, the report includes expert analysis from Superscript, SafeWeb, DRD Partnerships and insurer CFC, real-world examples of businesses affected by cyber incidents and practical guidance to help organisations strengthen their cyber resilience.
Download the guide here.
Key findings for East of England businesses
39.8% have experienced a cyber-security breach or data protection issue in the past 12 months
11.5% feel “very prepared” to handle a significant cyber-attack or data breach
38.9% identify financial loss or fraud as their biggest cyber-security concern.
