Question to the Department for Digital, Culture, Media & Sport:

To ask Her Majesty's Government, further to the Written Answer by Baroness Barran on 19 July (HL1969), on which specific pages of the National Cyber Security Centre's website their statistical data are published.

Full details of the NCSC’s comprehensive response to the proactive identification and removal of malicious activity on the internet can be found in its Active Cyber Defence Year 4 report: https://www.ncsc.gov.uk/report/acd-report-year-four. This report outlines all the measures the NCSC takes to identify and remove the malicious activity before it ever reaches the public. Up to date SERS statistics can be found at https://www.ncsc.gov.uk/information/report-suspicious-emails#section_1

If a person falls victim to a phishing email, that should be reported to the police via Action Fraud and it will be logged as a crime.

The 2021 Cyber Security Breaches Survey found that 32% of businesses identified experiencing phishing attacks in the previous 12 months. The survey does not ask about the proportion of phishing attacks on businesses that were successful. However the survey does find that, among the 39% businesses which identify any cyber breaches or attacks, one in five (21%) of these end up losing money, data or other assets.

The government does not hold similar statistics specifically related to phishing attacks against individual citizens.