Login Book a call Become a partner
Search
Clear search icon

The CyberSmart MSP Survey 2026
[REPORT]

75% of MSPs were breached last year. This report breaks down why, and what's coming next.

Key Takeaways:

☑ Breaches are still the norm. 75% of UK MSPs were breached in the past 12 months, and 54% were breached two or more times.

☑ AI threats remain the top concern. Nearly half of MSPs (49%) name emerging AI threats as their biggest risk - for the second year running.

☑ Supply chain risk has gone mainstream. Two in five MSPs or their customers were hit by a supplier-originated incident this year, and in over half of those cases, the MSP was caught up too.

☑Regulation is closing in. 76% of MSPs fall into scope of the Cyber Security and Resilience Bill, but only 45% say they're fully prepared.

What's inside?

  • Breach trends and repeat incidents. How many MSPs were breached in the last 12 months, how that compares to 2024 and 2025, and why repeat breaches are still alarmingly common despite a slight year on year improvement.
  • The threats keeping MSPs up at night. Why emerging AI threats remain the top concern for the second year running, how that compares to what MSPs think their customers are worried about, and where inflation and supply chain risk now rank.
  • Supply chain exposure and third party risk. How many MSPs or their customers were hit by a supplier originated incident this year, who actually gets affected when it happens, and how often third party risk is properly monitored versus left to periodic review.
  • Readiness for the Cyber Security and Resilience Bill. How many MSPs fall into scope of the new legislation, what proportion say they're genuinely prepared, and the single biggest concern holding back full readiness.
  • How customer expectations are shifting. What SME clients now expect from their MSP beyond IT support, including managing cybersecurity and meeting compliance obligations, and how customer cyber knowledge has matured over the past year.
  • Where MSPs are investing next. The top areas MSPs plan to put budget behind over the next one to three years, and what that signals about the broader shift toward managed compliance services.