URGENT: Two-Thirds of UK IT Leaders Lack Complete Device Visibility as SME Breach Rates Soar
July 18, 2025Helping Keep Small Business CYBERSafe!
Gibraltar: Friday 18 July 2025 at 10:00 CET
URGENT: Two-Thirds of UK IT Leaders Lack Complete Device Visibility as SME Breach Rates Soar
By: Iain Fraser – Cybersecurity Journalist
Published in Collaboration with: Nord VPN
SMECyberInsights.co.uk – First for SME Cybersecurity
Google Indexed on 180725 at 10:36 CET
#SMECyberInsights #SMECyberSecurity #SMECyberAwareness #CyberSafe #SME #SmallBusiness #NewResearch #OnlineDevices
A ground-breaking study has exposed a critical vulnerability in UK business Cybersecurity infrastructure, revealing that 67% of IT leaders lack complete visibility into company devices whilst nearly half of all organisations have suffered data breaches from unmanaged devices in the past year alone.
The research, conducted by unified endpoint management provider Scalefusion and published on 17th July 2024, surveyed IT leaders across the UK and uncovered alarming blind spots in enterprise device management that are leaving organisations—particularly Small & Medium Enterprises—dangerously exposed to evolving cyber threats.
The Scale of the Crisis
The findings paint a stark picture of the current Cybersecurity landscape:
* 48.4% of companies experienced data breaches caused by unmanaged or unseen devices in the past year
* 23.5% detect unauthorised devices accessing corporate data at least monthly
* Only 35% of IT leaders feel confident in their ability to quickly contain security incidents
* 64% of organisations discovered previously unknown devices being used for work purposes
The latest government data corroborates these concerns, with just over four in ten businesses (43 percent) reporting Cybersecurity breaches or attacks in the last 12 months, while 60% of UK SMEs claim they have had multiple attacks in 2024, with 61% citing security as the biggest challenge.
SME-Specific Vulnerabilities
The implications for Small & Medium Enterprises are particularly concerning. The Federation of Small Businesses reports that there were 5.6 million small businesses across the UK at the start of 2023, representing a vast attack surface for cybercriminals.
The research reveals that among the 48% of companies experiencing breaches from unmanaged devices, over a third (35%) reported facing attacks on at least a monthly basis. This indicates that breaches are not isolated incidents but represent ongoing, systematic vulnerabilities that SMEs are particularly ill-equipped to handle.
Key SME vulnerability factors include:
Limited IT Resources: 73% of SME security professionals have missed, ignored, or failed to act on critical security alerts, highlighting the resource constraints that prevent effective threat response.
Hybrid Working Challenges: The shift to remote and hybrid working has created unprecedented security challenges, with nearly two-thirds of organisations discovering shadow IT operations—unauthorised devices and applications being used for work purposes.
Tool Proliferation Problems: The study found that 59% of companies use four or more different endpoint security tools, creating operational complexity that SMEs struggle to manage effectively.

The Hidden Costs of Poor Visibility
The research exposes how organisations’ attempts to address security challenges may actually be exacerbating the problem. Multiple endpoint security tools are creating significant operational challenges for SMEs:
* 53% report increased administrative overhead
* 41% cite higher costs
* 37% experience critical data visibility gaps
* 35% face lack of interoperability between systems
Remarkably, only 7% of organisations claimed to face no problems from their multi-tool approach, suggesting that the vast majority of Small & Medium Enterprises are struggling with fragmented Cybersecurity infrastructure.
Rising Threat Landscape
The timing of this research is particularly significant given the escalating threat environment. Ransomware attacks doubled from less than 0.5 percent of businesses in 2024 to 1 percent in 2025—translating to an estimated 19,000 organizations affected.
Gartner projects that worldwide end-user spending on information security will total USD 212 billion in 2025, reflecting a 15.1% increase from 2024, indicating that organisations are recognising the need for enhanced Cybersecurity investment.
Expert Analysis
Sally King, Channel Sales Manager UK&I at Scalefusion, commented: “These findings confirm what we’ve been hearing from businesses across the UK and Ireland—there’s a critical gap between the security challenges organisations face and their ability to address them effectively. What businesses need is visibility and simplification—a unified approach that brings all endpoints under one management umbrella rather than juggling multiple disconnected systems.”
The research suggests that SMEs face a perfect storm of challenges: limited resources, increasing attack frequency, complex tool ecosystems, and inadequate visibility into their own infrastructure.
Potential Solutions and Positive Trends
Despite the concerning findings, the research identified some encouraging developments:
* Unified Endpoint Management platforms are already the most common method for employee onboarding (43%)
* 68% of IT leaders are attracted by zero-touch deployment solutions
* Growing recognition of the need for simplified, unified security approaches
The study suggests that organisations recognising these challenges and moving toward unified solutions are better positioned to address the evolving threat landscape while reducing operational complexity.
Implications for SME Decision-Makers
For Small & Medium Enterprises, this research underscores several critical action points:
Immediate Assessment Required: SMEs must urgently assess their device visibility and management capabilities, particularly given the high frequency of attacks among affected organisations.
Unified Approach Essential: The data strongly suggests that SMEs should prioritise unified endpoint management solutions over multiple disparate tools to reduce complexity and improve visibility.
Resource Allocation: With Small and Medium-sized Enterprises facing unprecedented data protection challenges as 2025 unfolds, organisations must ensure adequate resources are allocated to Cybersecurity management and incident response.
Regular Monitoring: Given that nearly a quarter of organisations detect unauthorised devices monthly, SMEs must implement continuous monitoring and regular security assessments.
Conclusion
This research represents a watershed moment for UK Small & Medium Enterprises, revealing that the majority of organisations lack fundamental visibility into their own IT infrastructure whilst facing increasingly sophisticated and frequent cyber attacks.
The findings suggest that SMEs who fail to address these visibility gaps urgently risk becoming part of the 48% experiencing regular breaches from unmanaged devices. With attack frequency increasing and the threat landscape evolving rapidly, the window for action is narrowing.
The path forward requires SMEs to move beyond fragmented security approaches toward unified, comprehensive endpoint management solutions that provide the visibility and control necessary to protect against modern cyber threats.
This analysis is based on Scalefusion’s “Bridging the Visibility Gap” research published July 2024, supplemented by the latest government Cybersecurity breach surveys and industry analysis.
What is a VPN & Does my SME Need one? A VPN is a Virtual Private Network a method of securing your communications credentials. When it comes to Small and Medium-sized enterprises (SMEs), the choice of VPNs can significantly impact the security and efficiency of their operations.
The NordVPN service allows you to connect to 5600+ servers in 60+ countries. It secures your Internet data with military-grade encryption, ensures your web activity remains private and helps bypass geographic content restrictions online. Join NordVPN Today and Save up to 73% and Get 3 months Extra Free – Rude Not to …!
UK Small Business Owner? Join SMECyber Free Now! & Access the SME Cyber Forum – Read, Learn, Engage, Share …
The Latest SME Cybersecurity News, Threat Intelligence & Analysis, Timely Scam Alerts, Best-practice Compliance, Mitigation & Resources specifically curated for UK Based SMEs in a Single Weekly Email direct to your Inbox or Smart Device together with Unrestricted Free Access to our entire SME Cyber Knowledge & Tutorial Library.


















