Skip to main content
Latest Data Breaches
UK cyber, made simple

Cyber security that actually makes sense.

Plain-English security guidance, training and live security updates for homes and small businesses — without the jargon or the fear-mongering.

Free · No account needed · Email yourself the report

From the library

Latest guides & explainers

Practical walk-throughs you can read in one sitting — new pieces land here first.

Guides & how-tos

A Simple Guide to Encryption

Encryption turns your data into a code that only you can unlock. This plain-English guide explains how it works and how to use it safely at home or in your small business.

4 May 2026

Threats & incidents

Common Cyber Threats Faced by Small Businesses

Small businesses are a popular target for cyber criminals, but you don't need a big IT budget to stay safe. Here are the most common threats to know about — and simple steps to tackle each one.

3 May 2026

Aligned to the standards UK organisations actually use

  • Cyber Essentials
  • ISO 27001
  • ICO-friendly
  • FCA-aligned
  • NCSC guidance
  • IASME-mapped

By the numbers

Counted live, not hand-typed in marketing.

10
Articles published
742
Threats summarised in plain English
10
Trusted sources curated
Median hours from threat to summary

Live counts from the database — refreshed on every page view.

How we help

Three things, done well

Most cyber sites try to do twenty things. We do three — understand the threat, act on it in five minutes, and stay sharp without becoming a security analyst.

1 · Understand

Know what's actually targeting UK SMBs

Plain-English briefings on the scams, breaches and vulnerabilities that hit UK businesses and families this week. No jargon, no scare-mongering, no American examples.

Popular

2 · Act

Do the five-minute fix yourself

Free interactive tools — password strength, breached-email lookup, MFA walkthroughs, SMB risk self-assessment. Each one tells you exactly what to do next. No account required.

3 · Stay sharp

Hear about the next one before it bites

Curated UK threat alerts by email. Pick your sources, pick your minimum severity, and we only ping you when something matters. One-click unsubscribe.

Where we sit

We translate official guidance into action you can finish today

NCSC writes the canonical advice. Big vendors sell you a product. We take both, strip the jargon, and hand you a five-minute checklist.

NCSC small-business advice

  • Authoritative PDFs, long-form guidance, government tone.
  • Threat advisories aimed at IT teams; weekly cadence.
  • Cyber Action Toolkit checklist, no live state.
  • Government-wide, public-sector tone.
  • Free.

A typical paid vendor

  • 200-page binders, vendor pitches, three-letter acronyms.
  • Global threat feeds — mostly noise for UK readers.
  • Check-the-box scanners that don't tell you what to do next.
  • Designed for security teams, sold to CIOs.
  • Per-seat licences, annual contracts.

Cyber Made Simple

  • Plain-English steps you can read in five minutes.
  • UK-curated alerts from NCSC, FCA, ICO, CISA and HIBP — refreshed every six hours.
  • Interactive tools — password strength, breach lookup, MFA walkthrough, SMB risk self-assessment — with the next step spelled out.
  • Built for owners, families, and the only-IT-person.
  • Free tier with no card; paid tiers from £6/month.
Live now

What's hitting the UK this week

Curated from NCSC, FCA, ICO, CISA and HIBP — refreshed every 6 hours.

See full feed
  1. Public breachXposedOrNot1 May

    Charter

    Charter Communications, a telecommunications company, was allegedly targeted by the ShinyHunters group in May 2026, exposing customer data including email addresses, phone numbers, usernames, physical addresses, purchase records, dates of birth, and geographic locations.

  2. Public breachXposedOrNot1 May

    CushmanWakefield

    Cushman & Wakefield, a real estate services firm, was targeted by the ShinyHunters group in May 2026, with data later published exposing corporate contact records including email addresses, names, job titles, company addresses, and phone numbers.

  3. Public breachXposedOrNot1 May

    AtlasMenu

    Atlas Menu, a GTA V and CS2 cheat service, was breached in May 2026 when an attacker allegedly gained access to all company systems and published the database online, exposing 64k unique email addresses along with usernames, IP addresses, support tickets, and bcrypt password hashes.

  4. Public breachXposedOrNot1 Apr

    McGrawHill

    McGraw Hill, an education company, confirmed a breach in April 2026 following an extortion attempt, with over 100GB of data later publicly distributed exposing 14.4M unique email addresses along with some names, physical addresses, and phone numbers.

  5. Public breachXposedOrNot1 Apr

    PitneyBowes

    Pitney Bowes, a shipping and mailing services company, was allegedly breached in April 2026 by the ShinyHunters group, with data later released publicly exposing 8.3M unique email addresses along with names, phone numbers, and physical addresses.

  6. Public breachXposedOrNot1 Apr

    CarnivalCorporation

    Carnival Corporation, a cruise operator, was allegedly breached by the ShinyHunters group in April 2026, with data later published exposing 8.7M records containing 7.5M unique email addresses, along with names, dates of birth, genders, and loyalty program details related to the Holland America Mariner Society.

Your first ten minutes

Don't try to learn everything — start here

  1. Skim this week's UK threats

    Two minutes on the live feed tells you what's actually hitting British SMBs and families right now — not generic global noise.

  2. Run the five-minute risk check

    Twenty plain-English questions, no account needed, gives you a personalised report and a prioritised action list. Email the report to yourself.

  3. Subscribe to UK alerts (only when it matters)

    Pick your sources, pick your minimum severity, and we email you when a threat matches. Typically a handful of times a month — never daily noise.

Curated from the UK and global sources you already trust

  • NCSC
  • ICO
  • FCA
  • CISA
  • Have I Been Pwned
  • IASME
  • NVD

Straight answers

Common questions

Is this for my home or for my business?

Both. The home plan is built for families and individuals — passwords, phishing, parental controls and recovery walk-throughs. The business plan adds posture self-assessment, free interactive tools and curated UK threat alerts for small teams. Same plain-English tone in both.

Why UK-focused?

Because most consumer cyber sites are American — they reference Social Security numbers, the FTC and "the IRS won't call you". We curate from NCSC, FCA, ICO and HIBP, so what you read on Monday is genuinely about your bank, your regulator and your scams.

Won't I just get more security spam?

We only email when something matters — typically a handful of times a month, not daily. Every email has a one-click unsubscribe and the sender domain is locked down (DMARC + DKIM) so it always looks the same.

Do I need to pay to use it?

No. The free interactive tools, the live security update feed and the email alerts are open to everyone. Paid plans add saved checklists, multi-seat access, advanced training and the white-label admin for partners.

What do you do with my data?

We're UK GDPR-aligned, store data in the EU, never sell anything, and run a public security.txt. Full details live on the privacy page.

Stay one step ahead

Get UK threat alerts by email

Plain-English summaries of new UK threats that actually matter to small businesses and families. Free, no spam, unsubscribe in a click.

Curated from NCSC, FCA, ICO, CISA and HIBP — only when something matters.

Ready when you are

Make cyber simple, today.

Create a free account in under a minute — no credit card. Run a five-minute self-check, save your results and get UK threat alerts only when they matter.