Cyber Security in Cheltenham
How to report scams, fraud and cyber crime, how often UK businesses and charities are attacked, and how likely Gloucestershire's risk register rates a cyber attack.
- 5 out of 5 likelihood in Gloucestershire's risk register
- 43% of UK businesses breached or attacked in a year
- 38% of UK businesses hit by phishing
Cyber Attacks and Online Fraud
Gloucestershire’s Community Risk Register rates a cyber attack as the most likely of the seven top emergencies facing the county. Attacks on essential services and businesses can disrupt things everyone relies on, while scams aimed at individuals, from fake delivery texts to bogus investments, can empty bank accounts.
Cheltenham has a closer connection to cyber security than most towns: it is home to GCHQ, whose National Cyber Security Centre leads the UK’s defence against cyber attacks and publishes free advice for the public.
This page explains who to tell if something goes wrong, how common attacks are according to the government’s latest survey, and where to find advice on protecting yourself, your family and your business.
How to Report Fraud, Scams and Cyber Crime
| What Happened | What to Do |
|---|---|
| Someone is in danger, or a crime is happening now | Call 999 |
| You've lost money or been hacked, scammed or defrauded | Call your bank straight away if money has gone, then report it to Action Fraud on 0300 123 2040 (Monday to Friday, 8am to 8pm) or online at any time |
| Your business, charity or organisation is under a live cyber attack | Call Action Fraud on 0300 123 2040, which takes these calls 24 hours a day |
| A suspicious text message | Forward it to 7726, free on most UK networks, then delete it (NCSC guide) |
| A suspicious email | Forward it to report@phishing.gov.uk (NCSC guide) |
| A scam website or advert | Report it to the National Cyber Security Centre |
Action Fraud is the national reporting centre for fraud and cyber crime in England, Wales and Northern Ireland. You can also sign up for Action Fraud Alert to get free warnings about scams in your area. More numbers are on our helplines and contacts page.
How Common Are Cyber Attacks?
There are no published figures for cyber crime in Cheltenham or Gloucestershire, so the best guide is the government's annual Cyber Security Breaches Survey. In the 2025/2026 survey, 43% of UK businesses (around 612,000) and 28% of charities (around 57,000) said they had a cyber security breach or attack in the previous 12 months.
| Measure | Businesses | Charities |
|---|---|---|
| Had a cyber security breach or attack in the last 12 months | 43% | 28% |
| Phishing attacks | 38% | 25% |
| Impersonation of the organisation in emails or online | 12% | 7% |
| Ransomware | 1% | — |
| Use two-factor authentication | 47% | 38% |
| Insured against cyber security risks | 47% | 35% |
| Ran a cyber security risk assessment | 30% | 27% |
| Cyber security a high priority for senior management | 72% | 60% |
Breaches by Business Size
Medium and large businesses were much more likely than micro and small ones to report a breach or attack.
| Business Size | Breached or Attacked |
|---|---|
| Micro (1 to 9 staff) | 42% |
| Small (10 to 49 staff) | 46% |
| Medium (50 to 249 staff) | 65% |
| Large (250 or more staff) | 69% |
Change Over Time
| Survey | Businesses Breached or Attacked |
|---|---|
| 2023/2024 | 50% |
| 2024/2025 | 43% |
| 2025/2026 | 43% |
Protect Yourself
Phishing, a convincing email, text or call that tricks you into handing over details or money, is by far the most common attack in the survey. A few habits protect against most of it: a password manager, two-step verification or passkeys on important accounts, updates switched on, and a second check before acting on any message that asks for money or details. Our guide to staying safe online covers each step in plain English, and the National Cyber Security Centre has advice for individuals and families and small businesses.
Frequently Asked Questions
How Likely Is a Cyber Attack in Gloucestershire?
- The Gloucestershire Community Risk Register gives a cyber attack the top likelihood score of 5 out of 5, the highest of any risk in the county, and an impact score of 3. It is the only one of the seven top risks rated that likely.
Is There Cyber Crime Data for Cheltenham?
- No. Fraud and cyber crime are reported nationally to Action Fraud rather than recorded by local police forces, so they aren't included in the street-level figures on our crime data page, and official statistics don't break them down below national level.
What Is the Connection Between Cheltenham and Cyber Security?
- Cheltenham is home to GCHQ, one of the UK's three intelligence and security agencies. The National Cyber Security Centre, which gives the public and organisations advice on staying safe online, is part of GCHQ.
I've Been Scammed. What Should I Do First?
- If you've lost money or shared bank details, call your bank straight away on the number on the back of your card, or call 159, which puts you through to almost any UK bank. Then change any passwords you gave away, and report it to Action Fraud on 0300 123 2040 or online.
How Often Is the Survey Published?
- Once a year. The 2025/2026 edition was published on 30 April 2026, from interviews carried out between August to December 2025. It only counts breaches that organisations noticed and were willing to report, so the real figures are likely to be higher.
About This Data
Survey figures from the Cyber Security Breaches Survey 2025/2026 by the Department for Science, Innovation and Technology and the Home Office, published under the Open Government Licence v3.0. Last updated 24 October 2026. Risk scores from the Gloucestershire Community Risk Register 2024 by the Gloucestershire Local Resilience Forum. Reporting advice from Action Fraud and the National Cyber Security Centre.