Country
Incident map· Last 365 days · by event date
Security incidents recorded here over the last 365 days (by event date) where United Kingdom is an affected place or a source-named origin. The map also shows the other places and attributed routes those incidents touch.
Scale
Source-recorded scale, types of impact and attribution over the last 365 days.
· Source: BleepingComputer
38,000,000people
· Source: BBC News
8,700,000people
· Source: fuitededonnées.fr
680people
Each row is one incident's own sourced figure. Nothing is summed across incidents.
33%3 of 9
A source names the attacker
Oliver's Travels said it discovered on October 20, 2026 that an unauthorized third party had accessed some of its systems, including its booking system, with the incident believed to have begun on October 19 .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
The UK NCSC said some ASOS customers received an unauthorized push notification from the ASOS app on October 6, and the company confirmed customer names and contact details were accessed .
According to manager magazin, Revolut answered a fraudulent information request sent from a legitimate government agency email domain, handing ID copies, account numbers and home addresses of at least 700 customers to criminals, who are now demanding ransom .
The UK NCSC with US and Dutch partners issued a joint advisory exposing Iranian state actors using spyware dubbed CHOSEN BRICK against dissidents, activists and journalists worldwide, including in the UK, perceived as a threat to Iran .
Ace & Tate said logistics partner CEVA Logistics told it on August 1, 2026 that an unauthorized party accessed systems used to process its orders, and on September 10 CEVA confirmed customer data had been viewed and copied .
The UK NCSC says it has seen increased targeting of operational technology systems across multiple sectors globally, including in the UK, by a range of threat actors, resulting in some limited real-world disruption .
Manchester Airports Group (MAG) confirmed on August 27 that an unauthorized third party obtained customer data tied to car park, lounge and Fast Track bookings and in-airport Wi-Fi sign-ups at Manchester, Stansted and East Midlands airports, including email addresses, phone numbers, vehicle registrations and postcodes .
According to BleepingComputer, French DIY marketplace ManoMano confirmed it identified unauthorized access linked to a customer-service subcontractor in January 2026, resulting in extraction of personal data tied to customer accounts and support interactions .
The UK Legal Aid Agency and Ministry of Justice disclosed that a cyberattack on the agency's online digital services was discovered on April 23, 2025 .
Marks & Spencer disclosed a cybersecurity incident in April 2025 and implemented system isolation and operational adjustments .
The UK National Crime Agency (NCA) announced that Transport for London's (TfL) computer network was breached between late August and early September 2024 .
The UK government disclosed a security incident affecting an Armed Forces payment network operated by an external contractor and separate from core Ministry of Defence (MOD) systems .
The map only reflects incidents this site has recorded with a sourced country. It is not the global distribution of attacks.
2 with a source naming the country of origin
All figures come from the sources each advisory cites. We do not estimate scale or attribute attacks ourselves.