Feeds

UK biz bled dry by cybercrime

Yes, the figures are sketchy, what of it?

Using blade systems to cut costs and sharpen efficiencies

The average UK business is losing £10,000 a year thanks to cyber espionage, extortion and other forms of online fraud.

In total the UK economy is losing £27bn a year and British businesses soak up £21bn of this loss. Given there are 2.1 million UK firms registered for VAT this gives a loss per firm of £10,000.

The numbers, available from the Office of Cyber Security (pdf) and Detica, claim an estimated loss of £9.2bn from IP theft - not illegal file-sharing but theft of trade secrets from UK firms.

A further £7.6bn is lost due to industrial espionage - defined as the theft of non-IP related data and £2.2bn is handed to criminal gangs by UK firms as the result of extortion. The OCS admits it has no evidence for such extortion, because it believes this crime is mostly not reported.

£1bn a year is lost due to loss or theft of customer data and £1.3bn goes thanks to direct online theft.

A spokesman for the Cabinet Office said it was impossible to say how much cyber crooks benefited from the billions they're extracting from Blighty.

The figures are based on a "most-likely scenario" but will form the basis of future policy.

The OCS warned: "Our assessments are, necessarily, based on assumptions and informed judgements rather than specific examples of cyber crime, or from data of a classified or commercially-sensitive origin."

It suggests approaching selected companies to ask if they are victims of cyber crime in order to both build awareness of the issues and to get some solid data on the problem.

The OCS also recommends the creation of a website to publicise the issue and to act as a central, anonymous, reporting hub for UK firms to report fraud.

The OCS estimates that the UK government loses £2.2bn due to cyber crime.

Even this number is an estimate. It is based on total tax and benefit fraud in the UK combined with an estimate of how many of these are due to "criminal attacks". The OCS treated all these attacks as cyber crimes "due in the main to the volume of transactions now conducted online".

The OCS release is available for download here. ®

Boost IT visibility and business value

More from The Register

next story
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Securing Web Applications Made Simple and Scalable
Learn how automated security testing can provide a simple and scalable way to protect your web applications.