The number of organisations reporting cyber security breaches or attacks has stayed fairly stable: 43% of UK businesses and 30% of charities – including 41% of health or care organisations. 66% of health and social care organisations have an incident response plan in place. That compares to just 23% of businesses overall.