As charities continue to rely on digital systems to manage donations, supporter information, volunteer records, and day-to-day operations, cyber security remains an important consideration across the sector.
Alongside reviewing their Charity Insurance, many organisations are also considering whether Cyber Insurance for charities could help support them in the event of an incident.
The latest Government Cyber Security Breaches Survey 2025/2026 highlights the continued cyber threat facing charities across the UK, with attacks ranging from phishing emails to more sophisticated cyber crime.
According to the survey, 28% of charities identified a cyber security breach or attack in the last 12 months, equating to approximately 57,000 charities affected across the UK.
How does this compare to last year?
The 2024/2025 survey found that 30% of charities experienced a cyber security breach or attack. While this means the percentage has reduced slightly year-on-year, from 30% to 28%, the findings still demonstrate how common cyber incidents remain within the sector.
The survey also notes that figures may underestimate the true scale of attacks, as they only reflect incidents that charities were aware of and able to identify.
While this small decrease is positive, the findings still demonstrate how common cyber incidents remain within the sector.
Phishing remains the most common threat
Phishing attacks continue to be the most common cyber threat affecting charities. The survey found that 25% of charities experienced phishing attacks in the last 12 months, while 7% reported impersonation scams where fraudsters posed as the organisation or members of staff.
While overall breach levels have reduced slightly year-on-year, phishing continues to represent a significant risk for charities of all sizes.
These attacks often involve fraudulent emails, fake invoices, impersonation attempts, or malicious links designed to steal sensitive information or gain access to systems.
For charities, phishing can present particular challenges due to:
- Smaller internal teams
- Reliance on volunteers
- High volumes of email communication
- Sensitive donor and beneficiary data
Cyber criminals are increasingly targeting organisations of all sizes, including charities, where weaker controls or limited cyber awareness may create opportunities for attack.
Cyber threats are continuing to evolve
Alongside traditional phishing attacks, organisations are now facing more sophisticated threats including:
- AI-generated phishing emails
- Voice impersonation scams
- Targeted social engineering attacks
- Malware and ransomware incidents
As cyber risks evolve, charities may wish to regularly review their cyber security measures, staff training, and incident response procedures to ensure they remain appropriate.
Cyber criminals are increasingly targeting organisations of all sizes, where limited resources or lower levels of cyber awareness may create opportunities for attack.
Why cyber resilience matters for charities
A cyber incident can have a significant operational and reputational impact on a charity. Beyond potential financial loss, attacks can disrupt services, affect supporter confidence, and compromise sensitive personal information.
Practical steps charities can consider include:
- Providing regular cyber awareness training for staff and volunteers
- Using multi-factor authentication (MFA)
- Maintaining secure data backups
- Reviewing password policies
- Creating an incident response plan
- Reviewing third-party supplier security
- Considering whether cyber insurance is suitable for the organisation
No charity is too small
One of the clearest messages from this year’s survey is that cyber risk is not limited to large organisations. Charities of all sizes can be vulnerable to cyber attacks, particularly where attackers see opportunities to exploit limited resources or weaker controls.
Taking proactive steps to improve cyber resilience can help charities protect their operations, finances, reputation, and the communities they support.
Free Guide: Cyber Insurance & Fraud Protection for Charities
Our Charity Cyber Insurance experts have created a comprehensive resource, which is designed to help you further understand the risks you may face and how to protect your mission.
This guide outlines practical steps to strengthen cyber security, prevent fraud, and ensure your charity is financially protected in the event of an attack.
Download the Cyber Insurance & Fraud Protection Guide today and take the next step in securing your charity’s future.
About WRS
As experienced Charity Insurance brokers, WRS Insurance Brokers can help you find the right Cyber Insurance for your charity. Get in touch with our team to discuss your organisation’s needs and request a quote. For more information, call the team on 01206 760780 or email hello@wrsinsurance.co.uk.
WRS is part of the Benefact Group, a charity-owned, international family of financial services companies that gives all available profits to charity and good causes.