Core Insights - A significant cyber protection gap exists among UK SMEs, driven by increased threat exposure and low penetration of cyber insurance [1][2][3] Group 1: Cyber Insurance Penetration - Cyber insurance penetration increases with firm size: 13.1% for sole traders, 26.4% for micro firms, 40.1% for small firms, and 63% for medium-sized firms, indicating that smaller companies are the least protected [2] - 35% of UK SMEs lack any form of cyber insurance, highlighting a substantial non-coverage issue [3] Group 2: Cyber Threat Landscape - 42% of small businesses reported experiencing a breach or attack in 2025, showcasing a growing mismatch between the frequency of incidents and the level of protection [3] Group 3: Barriers to Adoption - Persistent barriers to cyber insurance adoption include perceived affordability issues, uncertainty about coverage, and limited access to clear advice at the point of sale [2][3] - Experts suggest that treating cyber insurance as a specialist add-on rather than standard protection increases the likelihood of coverage gaps being discovered post-incident [3] Group 4: Opportunities for Insurers - The under-penetration of cyber insurance presents growth and retention opportunities for insurers, necessitating improved distribution effectiveness and reduced underwriting friction for smaller firms [3] - Insurers that simplify the purchasing process and enhance the relevance of cyber coverage to SME operational continuity are likely to see increased attachment rates and reduced underinsurance [3]