The Cyber Threat to UK Businesses Has Never Been Greater
2025 was a defining year for cyber attacks on UK organisations. Household names have been brought to their knees. Billions have been lost. And the message to every boardroom is now impossible to ignore.
For building owners, asset managers, and facilities operators, the risk goes further the connected systems running your buildings are increasingly targeted, and most have never been properly secured.
UK Car Manufacturer: £1.9 Billion. The Most Damaging Cyber Attack in British History.
In August 2025, a cyber attack shut down one of the UK's largest manufacturers for five weeks. The impact was devastating:
- £1.9 billion total economic damage to the UK economy
- £485 million underlying loss in a single quarter
- 5,000+ businesses in the supply chain affected
- Government forced to back a £1.5 billion loan guarantee to stabilise suppliers
- Classified as a Category 3 Systemic Event the highest category on the UK's cyber impact scale
The attack was not carried out by sophisticated nation-state hackers. It exploited compromised credentials and social engineering basic security failures that proper cyber hygiene would have prevented.
UK Retailer: £300 Million Lost.
46 days.
£300 million. 99% profit collapse.
A major UK retailer suffered a ransomware attack in April 2025 that caused catastrophic operational and financial damage:
- £300 million wiped from annual operating profit
- £750 million lost from market value at peak disruption
- Online ordering suspended for 46 days
- Statutory profit before tax fell 99% year on year
- A competitor explicitly cited the disruption as a reason for upgrading its own profit forecast four times
The attack entry point? Criminals impersonating employees to access internal systems. No technical expertise required.
UK Convenience Retailer: £80 Million Hit
A major UK convenience and food retailer was also targeted in 2025, pegging its cyber losses at £80 million after being forced to take critical systems offline and suffering data theft affecting customers and employees.
Three major UK brands. Three attacks. Billions in combined losses. All in the same year.
What This Means for Your Buildings
The 2025 attacks targeted corporate IT systems. But the next frontier is already here - operational technology and building systems.
BMS controllers, HVAC systems, access control, IoT sensors, and energy metering are increasingly connected to corporate networks. And almost universally under-secured.
In our building audits, we consistently find:
- Firmware not updated since the building was commissioned
- Devices running on default manufacturer credentials
- Unmanaged networks with direct public internet access
- Building automation disabled because security teams didn't trust connected systems
- Cloud-connected IoT devices with no documentation or visibility
A cyber attack on a building management system can disable heating and ventilation, unlock access control, cut energy monitoring and provide a backdoor into the wider corporate network.
The question is not whether your building systems are vulnerable. The question is whether you know it before someone else does.
The Regulatory Pressure Is Accelerating
The 2025 attacks have hardened the regulatory and insurance landscape:
NIS2 - fines of up to £17 million or 4% of global turnover. Building operators increasingly in scope.
Cyber Insurance - underwriters are tightening requirements. Basic cyber hygiene must now be demonstrable. Policies are being voided where organisations cannot prove that adequate security measures and controls are in place.
NCSC - following the 2025 attacks, issued guidance urging every organisation to identify and protect their critical networks. Building systems are explicitly referenced.
ESG & Investors - institutional investors and sustainability-focused tenants are demanding evidence of cyber resilience as part of due diligence. Unaudited building systems are a growing liability.
What Cyber Green
Does About It
Cyber Green delivers comprehensive IoT/OT digital building audits giving you a complete, verified picture of every connected device, every vulnerability, and every efficiency opportunity across your building systems.
One engagement. Three outcomes:
🔒 CISO / Head of Cyber - asset visibility, vulnerability remediation, compliance documentation
🌱 Head of Sustainability - quantified energy savings, carbon reduction, ESG reporting data
💰 CFO / Finance Director - a security investment that pays for itself