Cyber Attacks and AI: What Does It Mean for Workers?

Cyber attacks are usually reported as an IT problem.

For working people they can mean cancelled shifts, delayed wages, stolen personal details and, too often, blame landing on whoever clicked the link.

A cyber attack is a deliberate attempt to break into or disrupt computers, networks or connected equipment. Ransomware locks an organisation out of its own systems while criminals demand payment. The damage reaches well beyond the office. Tills, stock ordering, production lines and refrigeration all depend on connected systems. Recent attacks on supermarket cooling equipment in France used old, unpatched kit still running default passwords.

The scale is significant.

The government's Cyber Security Breaches Survey 2025/26 found that 43% of UK businesses identified a breach or attack in the previous year, around 612,000 businesses. That counts organisations affected, not individual attacks. Between September 2025 and August 2026 the National Cyber Security Centre (NCSC) received 1,831 reports of attacks. Of these, 337 needed its direct support and 80 were classed as nationally significant.

AI is raising the stakes. Launching the NCSC annual review on 3 November 2026, chief executive Dr Richard Horne warned of a real prospect of an unprecedented rise in incidents. His point was not that AI has invented new attacks, but that weaknesses tolerated for years can now be found and exploited at far greater speed and scale. Most successful attacks still rely on stolen passwords, unpatched systems and tricking staff.

Workers have rights here.

If a data breach involving your personal information puts you at high risk, your employer must tell you without undue delay. If work stops because systems are down, check your contract, as you may be entitled to normal pay. If you face a disciplinary hearing after an incident, don’t forget, you have the right to be accompanied by a WEU representative.

Following workplace policy protects you as well as the business.
Know how to report something suspicious. Never share passwords or login codes, approve unexpected login requests or skip security steps to save time. Report mistakes straight away.

Employers carry the greater responsibility. They must provide clear procedures, proper training in work time, maintained equipment and tested recovery plans.

Stephen Morris, General Secretary of the Workers of England Union, said:

"Workers feel a cyber attack first, through lost shifts, late pay and stolen personal details, and too often they are blamed for it. Members should follow security policy and report anything suspicious at once. In return, employers must invest in proper systems and training, and treat honest reporting as good practice, not a disciplinary matter. If you are unsure of your rights, contact the WEU office."

Several login screens do not make a workplace safe. Security depends on how systems are maintained and how people are supported to use them.

References

(Department for Science, Innovation and Technology and Home Office (30 April 2026). Cyber Security Breaches Survey 2025/2026, Reuters (30 April 2026). Over 40% of UK firms suffered cyber attack last year, survey finds (source for the 612,000 figure), National Cyber Security Centre (3 November 2026). NCSC Annual Review 2026: Incident management. National Cyber Security Centre (3 November 2026). Richard Horne's speech at the NCSC Annual Review 2026 launch, Quartz, reporting Associated Press (3 November 2026). U.K. warns AI-powered ransomware will likely hit critical infrastructure by 2028 (French supermarket cooling attacks), UK GDPR, Article 34: communication of a personal data breach to the data subject, Employment Rights Act 1996, section 28: right to guarantee payment, Employment Relations Act 1999, section 10: right to be accompanied.)

Key Takeaways

• Impact on Everyday Workers: Cyber attacks disrupt frontline operations—causing cancelled shifts, frozen payroll, compromised personal data, and unfair disciplinary blame on staff.
• AI Accelerating Vulnerabilities: The NCSC warns that AI allows threat actors to discover and exploit long-standing vulnerabilities, unpatched legacy hardware, and weak credentials at unprecedented scale.
• Statutory Employment Rights: Under UK GDPR and UK employment law, staff have the right to prompt data breach notifications, contract pay protections during IT shutdowns, and WEU representation at disciplinary hearings.
• Employer Accountability: Employers bear the core responsibility to maintain patched infrastructure, provide paid security training, and foster a no-blame culture for honest mistake reporting.