Question to the Ministry of Defence:

To ask the Secretary of State for Defence, how many nationally significant cyber-attacks occurred in (a) 2025 and (b) 2026.

The Ministry of Defence records and manages cyber incidents affecting Defence, including those within its supply chain and assesses them against Defence specific impact criteria. Therefore, the Department does not categorise incidents as nationally significant, and does not publish incident statistics as information relating to cyber incidents is managed in accordance with established security classification policy

The Department works closely with the National Cyber Security Centre (NCSC), which publishes annual statistics on nationally significant cyber incidents. The NCSC's 2025 Annual Review reported 204 nationally significant incidents across the UK, compared with 89 in 2024. Statistics for 2026 have not yet been released.