Skip to main content
Latest Data Breaches
UK cyber, made simple

Cyber security that actually makes sense.

Plain-English guidance, tools and breach updates for UK homes and small businesses — pick your door below and get a clear next step in minutes.

Free breach check · Business readiness on Business plan · No card for free tools

From the library

Latest guides & explainers

Practical walk-throughs you can read in one sitting — new pieces land here first.

Guides & how-tos

A Simple Guide to Encryption

Encryption turns your data into a code that only you can unlock. This plain-English guide explains how it works and how to use it safely at home or in your small business.

4 May 2026

Threats & incidents

Common Cyber Threats Faced by Small Businesses

Small businesses are a popular target for cyber criminals, but you don't need a big IT budget to stay safe. Here are the most common threats to know about — and simple steps to tackle each one.

3 May 2026

Aligned to the standards UK organisations actually use

  • Cyber Essentials
  • ISO 27001
  • ICO-friendly
  • FCA-aligned
  • NCSC guidance
  • IASME-mapped

By the numbers

Counted live, not hand-typed in marketing.

10
Guides and articles published
742
Breaches tracked in the catalogue
0
New breaches this week
30
Self-serve tools live now

Live counts from the database — refreshed on every page view.

How we help

Three things, done well

Most cyber sites try to do twenty things. We do three — understand the threat, act on it in five minutes, and prove it with saved scores and exports.

1 · Understand

Know what's actually targeting UK SMBs

Plain-English briefings on the scams, breaches and vulnerabilities that hit UK businesses and families this week. No jargon, no scare-mongering, no American examples.

Popular

2 · Act

Do the five-minute fix yourself

Free interactive tools — password strength, breached-email lookup, MFA walkthroughs, SMB risk self-assessment. Each one tells you exactly what to do next. No account required.

3 · Prove it

Show progress to your board, insurer or assessor

Save tool results, build evidence packs and track readiness against Cyber Essentials v3.3 — so renewal conversations start with facts, not guesswork.

Where we sit

We translate official guidance into action you can finish today

NCSC writes the canonical advice. Big vendors sell you a product. We take both, strip the jargon, and hand you a five-minute checklist.

NCSC small-business advice

  • Authoritative PDFs, long-form guidance, government tone.
  • Threat advisories aimed at IT teams; weekly cadence.
  • Cyber Action Toolkit checklist, no live state.
  • Government-wide, public-sector tone.
  • Free.

A typical paid vendor

  • 200-page binders, vendor pitches, three-letter acronyms.
  • Global threat feeds — mostly noise for UK readers.
  • Check-the-box scanners that don't tell you what to do next.
  • Designed for security teams, sold to CIOs.
  • Per-seat licences, annual contracts.

Cyber Made Simple

  • Plain-English steps you can read in five minutes.
  • Daily breach catalogue from XposedOrNot — publicly disclosed incidents with plain-English context for UK homes and SMBs.
  • Interactive tools — password strength, breach lookup, MFA walkthrough, SMB risk self-assessment — with the next step spelled out.
  • Built for owners, families, and the only-IT-person.
  • Free tier with no card; paid tiers from £6/month.
Tracked daily

Recent UK-relevant data breaches

From a catalogue of publicly disclosed breaches, updated daily, with plain-English next steps for each one. Data from XposedOrNot.

Browse the breach catalogue
  1. Public breachXposedOrNot1 May

    Charter

    Charter Communications, a telecommunications company, was allegedly targeted by the ShinyHunters group in May 2026, exposing customer data including email addresses, phone numbers, usernames, physical addresses, purchase records, dates of birth, and geographic locations.

  2. Public breachXposedOrNot1 May

    CushmanWakefield

    Cushman & Wakefield, a real estate services firm, was targeted by the ShinyHunters group in May 2026, with data later published exposing corporate contact records including email addresses, names, job titles, company addresses, and phone numbers.

  3. Public breachXposedOrNot1 May

    AtlasMenu

    Atlas Menu, a GTA V and CS2 cheat service, was breached in May 2026 when an attacker allegedly gained access to all company systems and published the database online, exposing 64k unique email addresses along with usernames, IP addresses, support tickets, and bcrypt password hashes.

  4. Public breachXposedOrNot1 Apr

    McGrawHill

    McGraw Hill, an education company, confirmed a breach in April 2026 following an extortion attempt, with over 100GB of data later publicly distributed exposing 14.4M unique email addresses along with some names, physical addresses, and phone numbers.

  5. Public breachXposedOrNot1 Apr

    PitneyBowes

    Pitney Bowes, a shipping and mailing services company, was allegedly breached in April 2026 by the ShinyHunters group, with data later released publicly exposing 8.3M unique email addresses along with names, phone numbers, and physical addresses.

  6. Public breachXposedOrNot1 Apr

    CarnivalCorporation

    Carnival Corporation, a cruise operator, was allegedly breached by the ShinyHunters group in April 2026, with data later published exposing 8.7M records containing 7.5M unique email addresses, along with names, dates of birth, genders, and loyalty program details related to the Holland America Mariner Society.

Your first ten minutes

Don't try to learn everything — start here

  1. Skim this week's UK threats

    Two minutes on this week's briefing shows what's actually affecting British SMBs and families — from our breach catalogue and editor-curated UK updates, not generic global noise.

  2. Run the five-minute risk check

    Twenty plain-English questions, no account needed, gives you a personalised report and a prioritised action list. Email the report to yourself.

  3. Save your score and export evidence

    Create a free account to keep results, build an insurance evidence pack and revisit your posture score as you close gaps.

Where our data comes from

  • XposedOrNot breach catalogue
  • Editor-curated UK regulatory updates
  • Weekly briefing research

Straight answers

Common questions

Is this for my home or for my business?

Both. The home plan is built for families and individuals — passwords, phishing, parental controls and recovery walk-throughs. The business plan adds posture self-assessment, free interactive tools, breach alerts and weekly briefings for small teams. Same plain-English tone in both.

Why UK-focused?

Because most consumer cyber sites are American — they reference Social Security numbers, the FTC and "the IRS won't call you". We write for UK readers: your bank, your regulator, and the scams that actually land in British inboxes. Breach data is synced daily from XposedOrNot; regulatory context is curated by our editors from UK announcements.

Won't I just get more security spam?

We only email when something matters — typically a handful of times a month, not daily. Every email has a one-click unsubscribe and the sender domain is locked down (DMARC + DKIM) so it always looks the same.

Do I need to pay to use it?

No. The free interactive tools, breach catalogue, security updates and weekly briefing emails are open to everyone. Paid plans add saved checklists, multi-seat access, advanced training and the white-label admin for partners.

What do you do with my data?

We're UK GDPR-aligned, store data in the EU, never sell anything, and run a public security.txt. Full details live on the privacy page.

Stay one step ahead

Get breach and briefing alerts by email

Plain-English summaries when a breach or regulatory update actually matters to small businesses and families. Free, no spam, unsubscribe in a click.

A few emails a month, only when something matters. Unsubscribe in one click.

Ready when you are

Make cyber simple, today.

Create a free account in under a minute — no credit card. Run a five-minute self-check, save your results and get breach and briefing alerts only when they matter.