GM agrees to a $220 million settlement over drivers' data. Learn how connected-car information was allegedly shared and what vehicle owners should know.
The post GM’s $220 Million Data Privacy Settlement: What Drivers Need to Know appeared first on TechRepublic.
Nearly four in 10 UK small firms were hit by a successful cyberattack in the past year, according to the latest Hiscox Cyber Readiness Report. The UK cyberattack rate reached 38%, significantly above the 29% global average recorded among nearly 7,000 smaller businesses surveyed worldwide.
The 10th annual report surveyed cybersecurity decision-makers at smaller firms, including 1,000 respondents in the UK. Britain recorded the highest attack rate among the markets included in the research. Globally, businesses that experienced an incident reported an average of four attacks during the past 12 months.
The findings place UK small businesses at greater exposure to successful cyberattacks than their international counterparts. While 29% of organisations globally reported a successful attack, the figure rose to 38% among small UK businesses.
The report also found that cyber incidents are creating measurable financial and operational costs. Globally, each incident cost organisations an average of $52,000 and resulted in around 32 hours of operational disruption.
In the UK, the average cost per cyberattack was $35,908, equivalent to £26,650. Although that figure was below the global average, the higher frequency of attacks means UK firms are more likely to encounter those costs.
The global attack rate also fell from the 59% figure reported in Hiscox's previous annual report. However, the two figures are not directly comparable because last year's research surveyed a broader group of 5,750 businesses across seven markets, while this year's report focuses specifically on almost 7,000 smaller firms.
Cyber incidents are also influencing business decisions beyond immediate recovery costs. Globally, 32% of affected firms said cyber incidents delayed growth and expansion plans.
Other reported consequences included higher staffing costs for 31% of businesses, direct financial damage for 30%, and lost business opportunities for 29%.
Reputation and customer trust ranked as the most significant cyber-related risk, cited by 48% of businesses surveyed. Operational downtime or business interruption followed at 46%, while supply chain or third-party disruption was identified by 44%.
Among firms that experienced an incident, 28% faced financial penalties and 26% experienced damaging publicity.
Businesses are responding to the continuing threat by increasing spending on cyber resilience. The global average investment reached $51,000, with firms directing spending toward new technology, specialist staff and employee training.
New technology was adopted by 51% of firms, while 55% invested in specialist staff and 62% updated employee training.
UK businesses reported considerably higher spending, averaging $59,700, or £44,294, on cyber resilience. That placed the UK third among the markets surveyed for resilience spending.
The report also identified a growing connection between cybersecurity performance and executive compensation. Globally, 32% of firms said executive pay is now linked to cybersecurity performance. Among UK small firms, the figure was 25%.
The findings also highlight a continuing gap between cybersecurity exposure and insurance uptake in the UK. Government data from the Department for Science, Innovation and Technology shows that 10% of UK businesses and 5% of charities hold a dedicated cyber insurance policy.
Separate research cited in the report found that just over 40% of UK SMEs hold cyber insurance, compared with around 63% of medium-sized firms and approximately 70% of FTSE 100 companies.
The latest Hiscox findings therefore show a combination of high cyberattack exposure, substantial investment in cyber resilience, and relatively limited cyber insurance uptake among UK businesses.
Aflac says a data breach in Japan may affect 4.38 million customers and agents, exposing personal, policy, and some banking information.
The post Aflac Data Breach: Over 4M Customers in Japan May Be at Risk appeared first on TechRepublic.
Written by Sean Tilley, Senior Sales Director EMEA at 11:11 Systems
Cyber downtime carries measurable financial consequences, and those consequences are becoming clearer with each major incident. Research from 11:11 Systems shows that 78% of European organisations report losses of up to $500,000 per hour following a cyber-related outage, while 6% face costs exceeding £1 million per hour. When recovery extends beyond containment, the disruption begins to register in revenue performance, contractual exposure, and customer stability rather than remaining confined to the technology function.
For UK leadership teams, the issue centres on continuity of income, fulfilment of obligations, and the strength of customer relationships under strain.
Recovery delays compound risk
Half of organisations surveyed require between one and two weeks to fully recover from a cyber incident. Over that period, cost exposure builds in ways that are rarely reflected in early estimates.
Revenue stalls, particularly where digital platforms underpin billing and subscriptions, while service commitments are breached, supply chains experience secondary disruption, and internal teams divert time and budget away from planned initiatives towards remediation and communications.
Extended recovery places additional pressure on customer relationships, especially in sectors where availability is assumed as standard. Regulatory scrutiny increases in parallel, particularly under UK GDPR and sector-specific resilience requirements, where organisations must demonstrate that appropriate safeguards were established before the incident occurred.
A significant proportion of the cost emerges over time rather than immediately. Insurance premiums adjust at renewal, forensic specialists and legal advisers remain engaged, customer notification programmes continue long after systems are restored, and remediation work extends into future quarters. By the time the full impact is visible, the loss total often exceeds initial projections.
According to Cyber Monitoring Centre recent UK attacks across retail, healthcare and critical infrastructure have collectively cost businesses more than £1.9 billion. At an individual level, even a contained incident can translate into multi-million-pound losses once revenue interruption, remediation spend and longer-term customer attrition are properly accounted for.
Recovery time remains the decisive variable, steadily increasing commercial strain and regulatory attention the longer disruption persists.
For boards, cyber downtime is no longer a technical failure but a test of governance. In the immediate aftermath of an incident, external scrutiny rarely focuses on how the attack occurred. Instead, attention turns to whether leadership understood its exposure, validated recovery assumptions and exercised informed oversight before disruption struck. Where recovery falters, questions follow around board assurance, investment prioritisation and whether resilience was treated as a compliance exercise rather than a core commercial safeguard worthy of sustained board attention. In that context, prolonged downtime can quickly become a proxy for broader leadership risk.
The preparedness gap
Despite recent high-profile incidents, many organisations still overestimate their ability to recover.
Backup environments may exist without having been stress-tested under realistic conditions, recovery objectives are documented but rarely validated, crisis governance structures that appear clear on paper can lose coherence under pressure and visibility across cloud platforms, SaaS providers, and outsourced partners frequently remains incomplete.
Modern enterprises operate across layered digital ecosystems that depend on managed services, third-party infrastructure, and interconnected suppliers, each introducing dependencies that may sit outside direct oversight. Without a consolidated view of these relationships, recovery planning remains fragmented and assumptions around restoration timelines tend to be optimistic rather than proven. When those assumptions fail, cost exposure accelerates quickly.
Resilience as a strategic advantage
The organisations that recover fastest are rarely those with the most technology, but those with the clearest decision rights. During major incidents, value is lost less through system failure than through delayed executive judgement such as uncertainty over who authorises restoration priorities, how customer communications are sequenced, and which commercial trade-offs are acceptable under pressure. Boards that rehearse these decisions in advance shorten recovery by eliminating hesitation at the moment it matters most. In competitive markets, that decisiveness increasingly separates resilient businesses from those that merely survive disruption.
Containing the cost of downtime requires disciplined preparation rather than reactive response.
Scenario-based recovery testing that includes executive leadership brings clarity to decision-making authority, communication sequencing and operational prioritisation, while tabletop exercises expose governance gaps before they are tested in live conditions.
Disaster Recovery as a Service can materially reduce restoration timelines where isolated environments and immutable backups are properly implemented. Equal attention should be given to external dependencies, with clear understanding of partner capabilities, escalation paths, and recovery commitments established in advance of disruption.
Effective resilience planning therefore extends across internal systems, cloud providers, and supply chain partners, ensuring that recovery capability is aligned rather than siloed.
Preparation does not prevent incidents, but it materially reduces their financial and operational impact.
What This Means for Boards
The commercial exposure created by cyber downtime is now quantifiable and, in many cases, escalating. The central question for boards is how effectively the organisation can absorb disruption without sustained damage to revenue, customer trust or regulatory standing.
Organisations that embed recovery capability into broader business planning place themselves in a stronger position to manage that exposure with discipline, control and credibility.
The post The True Cost of Cyber Downtime: A UK Board-Level Briefing appeared first on Security Boulevard.
Entrar