The UK Research and Innovation (UKRI) agency, responsible for funding scientific research with an annual investment of £8 billion, is facing a massive rise in cyber attacks. Data indicates that in 2025, UKRI has encountered over 5.4 million cyber incidents, a staggering sixfold increase from the previous year. Among these, more than 200,000 were phishing attempts, and over 11,000 involved malware aimed at compromising IT systems.
Targeting Valuable Intellectual Property
Attackers are not only hitting operational systems but are also after valuable intellectual property, a target for state-sponsored groups. Reports suggest that hostile foreign actors, primarily linked to Russia, are involved in these sophisticated attacks, alarming the Department for Science, Innovation and Technology (DSIT).
State-Sponsored Threat Activity
Suspicion primarily falls on Russia’s GRU, known for targeting UK governmental and critical infrastructure. The National Cyber Security Centre (NCSC) has already confirmed that groups associated with the GRU are actively involved in cyber espionage and sabotage against UK organisations.
Escalating Threats
The escalating number and sophistication of these cyberattacks reflect the rising geopolitical tensions. Experts warn of the evidence pointing to Russian involvement, indicating a larger campaign to disrupt UK scientific and technological advancements amidst ongoing geopolitical conflicts.
Calls for Stronger Defences
With these alarming trends, there’s an urgent need for investment in cybersecurity to protect critical national infrastructure. As cyber warfare gains prominence, safeguarding UK innovation will remain paramount for policymakers and cybersecurity specialists.
Key Points
- UKRI faced over 5.4 million cyber incidents in 2025, a sixfold increase from the previous year.
- More than 200,000 phishing attacks were reported, along with over 11,000 malware incidents.
- Attackers are targeting both operational systems and valuable intellectual property.
- Suspicions point heavily towards Russian state-sponsored cyber activities aimed at undermining UK infrastructure.
- The NCSC confirmed links between many cyber operations and Russian intelligence groups.
- Urgent demands for stronger cybersecurity measures are being made to protect innovation and research.
Why should I read this?
If you’re curious about cybersecurity, this piece unpacks a significant issue facing the UK’s research and innovation sector. It’s not just about numbers; it’s about the implications for national security and scientific progress. Trust me, knowing the level of threat out there can really bring home the importance of robust cyber defences. We’ve done you a solid by summarising the key points—take a moment to check it out!