Technology
Birmingham Businesses Map Next Cybersecurity Steps After 2025 Breach Data
West Midlands firms review training gaps and protection shortfalls as phishing remains the dominant threat.
How we reported this
Forty-three percent of UK businesses reported a cyber-attack or breach in 2025, according to the Cyber Security Breaches Survey 2025 published by the UK government. Phishing accounted for incidents at 85 percent of those affected companies. In Birmingham and the West Midlands, small businesses recorded average annual losses of £5,671 from such attacks, with 70 percent hit by phishing in the preceding year.
Why the numbers matter now
Seventy-two percent of UK businesses already rank cybersecurity as a high priority. Yet 52 percent of SME employees received no training at all, and 32 percent of SMEs operated with no protections in place. These shortfalls leave local firms exposed even as they assess what additional tools or processes they will adopt next.
Birmingham and West Midlands companies can trace the £5,671 average loss figure directly to regional data compiled by the Greater Birmingham Chambers of Commerce and reported at yourworld.net. The same records show that awareness of the government’s Cyber Aware campaign stays limited despite the priority businesses place on the issue.
Practical steps under consideration
Companies in the region are examining basic measures already shown to reduce risk. These include enabling multifactor authentication, enforcing stronger passwords, applying software updates on schedule, and training staff to spot phishing attempts. No new local product launches or specific development timelines appear in current records, so firms are focusing on consistent application of these existing controls.
The Greater Birmingham Chambers of Commerce page on cyber security in 2026 outlines why Birmingham businesses cannot continue to ignore the pattern of incidents. Local reporting from yourworld.net places the annual regional cost at £347 million when losses across small firms are aggregated. Decision makers are therefore weighing how quickly they can close the training and protection gaps identified in the 2025 survey.