Each year, a Cyber Security Breaches Survey is commissioned by the Department for Science, Innovation and Technology (DSIT) and the Home Office.
The 2025 survey has just been published and suggests that 30% of charities (and 43% of businesses) have reported some kind of cyber security breach or attack in the last 12 months.
Although still a massive concern, the survey suggests that smaller organisations are getting better at spotting and avoiding phishing attacks, but this still represents the most common attack vector by far.
The report identifies some steps you can take to minimise the risk, and you can read it https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025/cyber-security-breaches-survey-2025.
We often recommend the National Cyber Security Centre as a good source of free advice, and their Small Charity Guide is available using the link https://www.ncsc.gov.uk/collection/charity.