Companies are more concerned about cyberattacks than high energy prices. The number of incidents is also rising sharply in Slovakia

Cyber threats are becoming one of the most serious risks to business. As many as 38% of British firms have identified them as one of the biggest problems of the present day, placing them ahead of economic uncertainty, the introduction of new technologies and rising labour costs. Among large corporations, as many as 41% of respondents regard cyber security as a significant challenge. This is according to a survey by the consultancy firm Grant Thornton of 500 representatives of British businesses.

Data from Slovakia also confirms the growing significance of cyber threats. In 2025, the National Cyber Security Centre recorded a total of 1,650 reported incidents, an increase of approximately 40% year-on-year. Meanwhile, the number of serious incidents has even tripled. 

Cyberattacks are now a greater threat than rising costs 

A Grant Thornton survey reveals a significant shift in what companies consider to be the greatest threat to their business. Whilst in previous years concerns about inflation, energy prices and labour shortages dominated, cyber security has now taken top spot in the latest UK survey. Concerns about cyber threats are cited by 38% of companies, whilst 24% identify high energy prices and other input costs as a problem, and 22% cite a shortage of skilled workers. 

It is essential for companies to invest in technologies, including artificial intelligence, which, when deployed correctly, can boost their efficiency. At the same time, they should not overlook cyber security, as without proper security measures, companies face an existential risk. Investment in technology is already one of the key responsibilities of management in every company.  

Large companies, however, perceive cyber risks more acutely. 41% of large corporations identify them as one of their main challenges. These heightened concerns are also linked to the complexity of their operations, the greater number of information systems they use, and their interconnections with suppliers and customers. A cyber-attack may therefore not only affect internal IT systems, but could also disrupt production, service delivery, or the entire supply chain. 

According to the survey, companies in the retail, catering and leisure sectors also have significant concerns. In this sector, as many as 42% of respondents identified cyber security as one of the biggest challenges, alongside rising energy prices and other input costs.

Slovakia saw a 40% increase in reported cyber incidents 

The growing importance of cyber security is also confirmed by data from the National Security Authority. The National Cyber Security Centre recorded a total of 1,650 reported cyber incidents in 2025, compared with 1,178 in 2024. This represents a year-on-year increase of approximately 40%. The number of reports of serious incidents rose even more sharply, from 23 to 75. 

The most common type of reported incident was social engineering, accounting for 1,067 reports, approximately 65% of the total. These are attacks in which attackers attempt to deceive employees or other users into revealing passwords, sensitive information, or granting access to information systems. Common examples include fraudulent emails, fake invoices, or impersonating a superior or business partner.

Companies must invest not only in protection but also in preparedness for an attack 

From a business perspective, it is important to realise that cyber risk cannot be completely eliminated. Even a company that invests in system security can still be successfully attacked. It is therefore crucial to be able to detect an incident in good time, limit its consequences and restore operations as quickly as possible. 

Key measures include regularly updating systems, multi-factor authentication, secure and tested backups, ongoing staff training, and a clear procedure for dealing with security incidents. An important part of preparedness is also the vetting of external IT suppliers and cloud service providers. 

The growing significance of cyber risks is also reflected in regulation. New European requirements based on the NIS2 Directive, which Slovakia has incorporated into its Cyber Security Act, have broadened the scope of regulated organisations and place greater emphasis on risk management and incident preparedness. 

The results of the Grant Thornton survey and European security analyses thus show that cyber resilience is becoming a key component of a company’s competitiveness. In a digitalised economy, it can be decisive not only for data protection but also for a company’s ability to continue operating.

About the survey 

The survey, commissioned by the consultancy firm Grant Thornton UK, was conducted by Censuswide between 28 August and 8 September 2026 amongst 500 representatives of UK businesses with at least 25 employees. It included business owners, senior management, finance directors and those responsible for tax matters. The sample comprised 100 small businesses, 300 medium-sized companies and 100 large corporations. The survey results can be found here.