NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 2 of 32
Introduction
CEO foreword
Nobody wants to believe their business could grind to a halt following a cyber attack. But any leader who fails to prepare for that scenario is jeopardising their business’s future.
Over the last year, cyber attacks on household brands have brought the NCSC’s work to the forefront of public consciousness. Empty shelves and stalled production lines are a stark reminder that cyber attacks no longer just affect computers and data, but real business, real products, and real lives.
Richard Horne
CEO, NCSC
Open letter
An open letter from Shirine Khoury-Haq, CEO of The Co-op Group, reflecting on the high-profile cyber attack.
Dear business leaders and decision makers, I am writing this letter as a CEO whose business has just experienced a cyber attack, in the hope that by sharing some of our experiences and learnings, you can all feel better equipped in dealing with what is a mounting issue for us all.
Shirine Khoury-Haq
CEO, The Co-op Group
Ministerial foreword
The United Kingdom is one of the most digitally connected countries in the world.
That is something to be celebrated. With so many aspects of people’s lives having an online dimension, it is absolutely right that we should seek to maximise the benefits of rapid technological progress.
Dan Jarvis MBE MP
Minister of State (Minister for Security)
Message from Director GCHQ
Cyber security is a shared responsibility argues Anne Keast-Butler, Director GCHQ.
This year, the realities of cyber attacks have hit the headlines and impacted the bottom lines of many companies. Incidents like the high-profile attacks on Marks & Spencer, the Co-op Group and Jaguar Land Rover serve as a stark reminder that the cyber threat is not just an abstract concept but a real one with real-world costs.
Anne Keast-Butler
Director GCHQ
continue reading message from Director GCHQ