Information on cyber breach incidents reported to the FCA

Reference Case Number: FOI2026/00797

Freedom of Information: Right to know request:

Please provide information relating to cyber breach incidents reported to the FCA.

FCA response:

By way of background, it may be helpful to know that we hold centralised records on major operational incidents reported to the FCA by individual firms under SUP 15.3 and Principle 11 – this includes incidents that are the result of cyber-attacks. Therefore, the figures provided below do not include incidents at FCA-regulated firms that have not been reported directly to the FCA.

We have interpreted your reference to ‘cyber breach incidents’ to include all reported cyber incidents and not just those relating to a data breach. Please note that all data is accurate as of 15 April 2026 and may be subject to change due to ongoing investigations and incidents.

1. How many cyber breach incidents did regulated firms report to the FCA in the full financial year of 2024/25?

During the financial year 2024/25, we received 86 reports of cyber incidents across regulated firms.

2. How many of those reports came from FCA authorised general insurers and insurance intermediaries, including price comparison sites?

Of the 86 reports of cyber incidents across regulated firms for the 2024/25 financial year, 11 reports came from FCA authorised general insurers and intermediaries, including price comparison websites.

3.How many came from insurance intermediaries and price comparison sites?

Of the 11 reports from FCA authorised general insurance and intermediaries for the 2022/23 financial year, 9 reports came from firms that we have categorised as Insurance intermediaries, including price comparison websites.

4.How many cyber breach incidents did regulated firms report to the FCA in the full financial year of 2025/26?

During the financial year 2025/26, we received 63 reports of cyber incidents across regulated firms.

5.How many of those reports came from FCA authorised general insurers and insurance intermediaries, including price comparison sites?

Of the 63 reports of cyber incidents across regulated firms for the 2025/26 financial year, 9 reports came from firms that we have categorised as general insurers and insurance intermediaries, including price comparison websites.

6.How many came from insurance intermediaries and price comparison sites?

Of the 9 reports from FCA authorised general insurance and intermediaries for the 2025/26 financial year, 7 reports came from firms that we have categorised as Insurance intermediaries, including price comparison websites.

Date of Release: 07/05/2026

Information on cyber breach incidents reported to the FCA - May 2026