--- title: 1 in 4 businesses hit by cyber attacks through their... description: New research from Databarracks reveals that 26% of UK businesses suffered a cyber incident originating in their supply chain over the past year. Nearly half... canonical: https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: 1 in 4 businesses hit by cyber attacks through their supply chain in the last year | daily.dev og:description: New research from Databarracks reveals that 26% of UK businesses suffered a cyber incident originating in their supply chain over the past year. Nearly half... og:url: https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18 og:image: https://api.daily.dev/og/posts/aSzMxTs18.png og:image:alt: 1 in 4 businesses hit by cyber attacks through their supply chain in the last year og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 1 in 4 businesses hit by cyber attacks through their supply chain in the last year **[IT Security Guru](https://daily.dev/sources/itsecurityguru)** · 5 min read · 0 upvotes · 0 comments ## Summary New research from Databarracks reveals that 26% of UK businesses suffered a cyber incident originating in their supply chain over the past year. Nearly half (48%) admitted continuing to work with suppliers despite known security concerns, and those organisations were over four times more likely to experience a supplier-originated incident. While 89% of businesses assess supplier resilience at onboarding, the risk persists once relationships are established. Supply chain vulnerabilities rank as a top-three IT resilience challenge for the next five years. Experts urge moving beyond compliance questionnaires toward genuine visibility, collaborative exercises with suppliers, and treating critical supplier resilience as part of an organisation's own resilience strategy. Broader findings show 65% of organisations fear a serious cyber attack could threaten their survival, though business continuity planning has reached a record high of 90%. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of UK businesses have experienced a cyber attack originating from their supply chain? 26% of UK businesses, or roughly one in four, suffered a cyber incident that originated in their supply chain over the past year. This comes from Databarracks' Data Health Check 2026 survey of 500 UK IT decision-makers. Notably, 48% of businesses admitted continuing to work with suppliers despite known resilience or security concerns. _Teams tightening vendor risk policies can follow supply chain security coverage on daily.dev._ ### Does continuing to work with known risky suppliers actually increase the chance of a cyber incident? Yes, organizations that knowingly continued working with risky suppliers were over four times more likely to suffer a supplier-originated cyber incident: 43% of those organizations experienced an incident, compared with just 10% of organizations that avoided known risky suppliers, according to the Data Health Check 2026 survey. _Anyone weighing vendor risk tradeoffs can track supply chain security research on daily.dev._ ### How many organizations that suffered a ransomware attack ended up paying the ransom? Only 18% of organizations affected by ransomware paid the ransom, according to Databarracks' Data Health Check 2026 survey, while 59% recovered from backups instead. Overall, 25% of organizations experienced a ransomware attack in the past 12 months, and 90% of surveyed organizations now hold a business continuity plan. _Engineers building ransomware recovery plans can follow related resilience research on daily.dev._ ## Similar posts on daily.dev - [Retail Cyberattacks Reveal Hidden Weaknesses In Supply Chain Security](https://daily.dev/posts/retail-cyberattacks-reveal-hidden-weaknesses-in-supply-chain-security-bp7upgaih) · Security Boulevard · 0 upvotes · 0 comments - [Software Supply Chain Security: Key Findings from Omdia's 2026 Report](https://daily.dev/posts/software-supply-chain-security-key-findings-from-omdia-s-2026-report-vanlfniho) · Docker · 2 upvotes · 0 comments - [2026 Study from Panorays: 85% of CISOs Can’t See Third-Party Threats Amid Increasing Supply Chain Attacks](https://daily.dev/posts/2026-study-from-panorays-85-of-cisos-can-t-see-third-party-threats-amid-increasing-supply-chain-at-86fvvblda) · Latest Hacking News · 0 upvotes · 0 comments - [Why hackers are targeting your digital supply chain, not just your systems](https://daily.dev/posts/why-hackers-are-targeting-your-digital-supply-chain-not-just-your-systems-jgjtnqy9a) · The Next Web · 0 upvotes · 0 comments - [Cyble Reports Record Surge In Software Supply Chain Attacks](https://daily.dev/posts/cyble-reports-record-surge-in-software-supply-chain-attacks-9bkvjwbuh) · Cyble · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"1 in 4 businesses hit by cyber attacks through their supply chain in the last year","url":"https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18"},"datePublished":"2026-07-21T13:53:04.871Z","dateModified":"2026-09-14T07:01:56.555Z","description":"New research from Databarracks reveals that 26% of UK businesses suffered a cyber incident originating in their supply chain over the past year. Nearly half...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8080f774247cd92bd0f0528c327f88e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8080f774247cd92bd0f0528c327f88e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"IT Security Guru","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IT Security Guru","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/ae9fe7d07c814192b35f86ad698fb374","url":"https://daily.dev/sources/itsecurityguru"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,ransomware","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IT Security Guru","item":"https://daily.dev/sources/itsecurityguru"},{"@type":"ListItem","position":3,"name":"1 in 4 businesses hit by cyber attacks through their supply chain in the last year"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/1-in-4-businesses-hit-by-cyber-attacks-through-their-supply-chain-in-the-last-year-aszmxts18#faq","mainEntity":[{"@type":"Question","name":"What percentage of UK businesses have experienced a cyber attack originating from their supply chain?","acceptedAnswer":{"@type":"Answer","text":"26% of UK businesses, or roughly one in four, suffered a cyber incident that originated in their supply chain over the past year. This comes from Databarracks' Data Health Check 2026 survey of 500 UK IT decision-makers. Notably, 48% of businesses admitted continuing to work with suppliers despite known resilience or security concerns. Teams tightening vendor risk policies can follow supply chain security coverage on daily.dev."}},{"@type":"Question","name":"Does continuing to work with known risky suppliers actually increase the chance of a cyber incident?","acceptedAnswer":{"@type":"Answer","text":"Yes, organizations that knowingly continued working with risky suppliers were over four times more likely to suffer a supplier-originated cyber incident: 43% of those organizations experienced an incident, compared with just 10% of organizations that avoided known risky suppliers, according to the Data Health Check 2026 survey. Anyone weighing vendor risk tradeoffs can track supply chain security research on daily.dev."}},{"@type":"Question","name":"How many organizations that suffered a ransomware attack ended up paying the ransom?","acceptedAnswer":{"@type":"Answer","text":"Only 18% of organizations affected by ransomware paid the ransom, according to Databarracks' Data Health Check 2026 survey, while 59% recovered from backups instead. Overall, 25% of organizations experienced a ransomware attack in the past 12 months, and 90% of surveyed organizations now hold a business continuity plan. Engineers building ransomware recovery plans can follow related resilience research on daily.dev."}}]} ```