UK firms experienced 668k cyber attacks each in 2021

UK businesses were subjected to 667,597 different cyberattacks during 2021, experiencing a new attempt to breach their systems online every 47 seconds, according to new data published by Beaming, a specialist business ISP.

Although the total volume of attacks was 3% lower than in 2020, the rate of attacks on UK businesses online remains historically high. Cyberattacks increased by 11% when the UK moved to lockdown and widespread home working in 2020 and have remained in excess of 1,750 attacks per day since then.

Beaming’s analysis of commercial internet traffic shows that UK businesses received 165,933 attempts to breach their systems online in the final three months of 2021, the equivalent of 1,804 a day. The rate of attack climbed steadily between September and December 2021.

Beaming identified attacks on businesses from 257,435 IP addresses during the fourth quarter of 2021. It traced almost half (49%^ to locations in China. The USA (25%), India (13%), Brazil (10% and Russia (10%) also played host to significant proportions of attacking IP addresses.

Remotely controlled devices continued to be the most frequently targeted application by hackers, attracting 9% of all attack activity. These include network device administration which is often unsecured by default and a common route into target organisations.

Sonia Blizzard, managing director of Beaming, said: “Cyberattacks fell very slightly in 2021, but remain at historically high levels. UK businesses with internet connections encountered new cyberattacks every 47 seconds last year. There is no room for complacency.”

“Attack patterns over the last two years suggest cybercriminals see remote working as a significant opportunity to access company data and IT systems via employees’ unmanaged domestic internet connections. Attacks increase when people are asked to work from home.

“ISPs like Beaming can help businesses reduce the enhanced risk of exposure associated with home and hybrid working. Organisations also need to ensure they are building resilience through training, technology and documented cybersecurity policies.”

Graphics: Cyberattacks on UK businesses / Attacking IP addresses by origin