AI Cyber Threats: Government Issues Stark Warning to UK Businesses

The UK Government has issued an open letter to businesses on the rise of AI cyber threats. Even small businesses and independent high street retailers need to act now.

The UK Government has issued a rare and urgent open letter to business leaders, warning that artificial intelligence is rapidly transforming the cyber threat landscape, and that all businesses, including small and independent firms, need to act now.

Signed by the Secretary of State for Science, Innovation and Technology and the Minister for the Cabinet Office, the letter makes clear that cyber attacks are no longer limited to a small number of highly skilled criminals. Instead, new AI models are becoming capable of finding vulnerabilities, writing attack code, and launching sophisticated cyber attacks at unprecedented speed and scale.

Crucially, the Government stresses that AI cyber capabilities are now doubling every four months compared to eight months previously, significantly faster than previously expected, meaning businesses may be exposed far sooner than anticipated.

Independent retailers are not “too small” to be targeted

Commenting on the letter, John Halliday, Bira’s marketing lead, warned that smaller businesses are particularly exposed.

“In the modern cyber threat landscape, small businesses risk becoming the weakest prey, singled out and overwhelmed by an ambush of tigers. Criminals go where defences are lightest, and AI makes sophisticated attacks cheap, fast and scalable.”

The Government’s letter reinforces this point, highlighting that AI-enabled tools now allow attackers with limited expertise to carry out attacks that previously required significant resources and specialist knowledge.

For our members, this means that size is no longer a shield. In fact, limited IT capacity, reliance on third party systems, and stretched management time can make smaller firms more attractive targets.

What the Government is asking businesses to do

The open letter is not new regulation, but it is a clear warning shot. It urges all businesses to:

• Treat cyber security as a board‑level and leadership priority
• Assume that AI‑enabled attacks will become more common and more sophisticated
• Act now using existing cyber governance and best‑practice guidance, rather than waiting for future legislation

The Government specifically points businesses towards guidance produced by the National Cyber Security Centre (NCSC) and broader cyber governance frameworks designed to improve resilience at an organisational level.

Practical support for Bira members

Bira strongly encourages members to take this warning seriously and to act now. In addition to Government guidance, members can access practical, retailer‑focused support through Bira’s Cyber Hub, which brings together:

• Plain‑English cyber security advice for independent businesses
• A cyber essentials readiness tool
• A cyber security guide for small businesses
• Links to your local Cyber Resilience Centres for free support

Cyber security is no longer just an IT issue — it is a business survival issue. As AI accelerates the scale and speed of attacks, preparation, awareness and governance will be critical.

As John Halliday concludes: “This is not about panic — it’s about preparedness. The businesses that take cyber security seriously today will be the ones still trading tomorrow.”

To read the open letter, click here.