How Cyber Recruitment Has Been Impacted By Recent Attacks

The threat of cyber attacks is rising. So far in 2025, we have already seen a number of high-profile attacks that have disrupted businesses and consumers across the UK.

With approximately 73% of business leaders concerned that they will experience a cyber security incident that will impede their operations in the next 12 to 24 months, many organisations are increasing their cyber security measures. Consequently, the cyber security recruitment market is adapting to facilitate this increasing demand to protect business interests.

Major cyber attacks in 2025

Several large-scale cyber attacks have already hit the headlines this year, affecting major brands and bringing the acute danger of cyber incidences to the public’s attention. These attacks all significantly affected the operations of several leading businesses.

Marks & Spencer

Marks & Spencer experienced a large ransomware attack over Easter which impacted in-store card payments, online deliveries, and stock. The major disruptions lasted until July, and some services remain unavailable. This cyber attack is estimated to have cost Marks and Spencer £300m, one of the most damaging cyber attacks the UK has seen. The attack is said to have originated from a cyber criminal impersonating an employee and gaining access to Marks and Spencer’s networks and deploying ransomware.

The Co-operative Group

The Co-operative Group (Co-op) managed to contain a ransomware attempt just days after the M&S breach. With many businesses on edge because of the attack, the Co-op’s IT team managed to detect the cyber attack early enough that they were able to take a number of systems offline before the ransomware was fully deployed. However, a significant proportion of customer data was stolen in the process. Whilst the attack caused some issues, with back office and call centre systems being taken offline and stock reduced for several weeks, the disruption was minimal.

Harrods

Harrods was also able to shut down a number of their systems after a group of cyber criminals attempted to gain unauthorised access. The IT team were able to restrict internet access and take internal systems offline before the attackers were able to deploy ransomware.

Adidas

Adidas experienced a data breach after attackers were able to access customer information from its third-party customer service providers. Whilst this data breach only affected customers who had recently contacted the company’s helpdesk and did not impact wider operations, the attackers stole key customer information.

KNP

KNP experienced a cyber attack that involved criminals gaining access to its systems by guessing an employee’s weak password. Critical data was lost and the company realised it lacked the resources or money to recover after the attack. This transport company, which had been operating for 158 years, went under soon after and 700 employees lost their jobs.

How do cyber attacks affect businesses in the long term?

Cyber attacks remain a significant threat to organisations across the UK. Recent UK Government statistics reveal that 43% of businesses experienced a cybersecurity breach or attack in 2024, with the average cost per affected business estimated at £1,600. Many businesses are already struggling to generate profit after years of Covid restrictions, recessions, cost of living crises, and the most recent rise in Employer National Insurance. All of these factors can make it difficult for businesses to survive cyber attacks.

Furthermore, the financial loss is only part of the wider impact of these threats. Cyber attacks can severely damage customer and client confidence, particularly when personal data is compromised. In cases where sensitive information is stolen and sold on, customers may become victims of identity fraud or targeted by further scams. As a result, consumers are increasingly wary of engaging with companies that have experienced serious breaches.

Following the recent cyber attacks on Marks & Spencer and the Co-operative Group, 15% of consumers said that they are less likely to shop online with these retailers, while 12% stated they intend to delete their associated accounts entirely. These statistics should serve as a stark warning to businesses about the wider effects of cyber attacks on consumer behaviour.

The cyber recruitment market in 2025

The recent cyber incidents have highlighted the urgent need for better cyber defences, which is driving demand for qualified and experienced cyber professionals.

Around 44% of businesses report that they have urgent skills gaps in basic cyber security areas. However, many organisations are struggling to fill these gaps. There is a shortfall of approximately 4.8 million cybersecurity professionals globally. Therefore, organisations have to work harder to attract the cyber security talent they need.

Recognising the importance of cyber security, the UK Government has invested £16 million as part of the Cyber Growth Action Plan to fund cyber security start-ups and innovations. This funding aims to generate 25 “spin-outs” by 2030 and attract £30 million in additional funding, bringing further growth to the UK cyber security sector and increasing cyber recruitment demands.

Cyber security professionals in demand

With businesses increasingly aware of their cyber security risks, many are looking to hire more professionals to fill their skills gaps. During this time of high demand, the following skillsets are the most sought-after.

Network security architects

Network security architects are in demand due to their advanced specialist role. They play a crucial part in designing networks that can withstand new and unpredictable cyber threats, as well as continuously developing key strategies to protect the business in question from evolving threats. Highly experienced professionals can command a salary of between £80-100k a year.

Cyber security engineers

Cyber security engineers are a critical part of the cyber security team and often do more of the “hands-on” work, rather than strategic or design-focused work. They build and secure systems that architects have designed, as well as deploy security protocols that will protect the organisation in question from attacks. A cyber security engineer can be a generalist role, with the engineer taking on whatever responsibilities are needed within a company. Whilst this can be a non-specialist role, cyber security engineers are high in demand because they are vital professionals for smaller companies who cannot afford a large team of specialist cyber security experts. Highly experienced engineers can earn anywhere between £50-70k a year.

Cyber security analysts

Cyber security analysts are desirable because they are specialist cyber security professionals who are dedicated to detecting and monitoring threats in an organisation’s systems. By analysing logs and systems, cyber security analysts are on the front-line for detecting whether a security breach has occurred and reporting it to the senior leadership team. Highly experienced cyber security analysts can reach a salary between £65-85k a year.

Penetration testers

Penetration testers, or “ethical hackers”, play a critical and specialist role in any cyber security team. With 73% of successful data breaches involving the exploitation of a vulnerability, penetration testers are vital as they identify all the vulnerabilities in an organisation’s systems that malicious hackers would work to exploit. They need to have specialist knowledge, including the latest methods that cyber criminals use in order to test them against an organisation’s systems and see if they can break through their defences. Highly experienced penetration testers can earn between £60-80k a year.

In today’s digital landscape, businesses of all sizes must prioritise robust cyber security measures to safeguard their operations, finances, and reputation. As cyber threats become more sophisticated and frequent, the demand for recruiting the best cyber security talent increases. Investing in cyber talent is a vital strategic move that enables organisations to stay resilient, competitive, and prepared for the challenges ahead.

If you are looking to improve your cyber recruitment, VIQU IT is a cyber security specialist recruitment agency, which has the expertise to help you secure the professionals your business needs to protect your infrastructure and operations.