One in Four Property Sector Businesses Hit by Cyberattack, RICS Survey Finds

A new survey has found that over a quarter of UK built environment professionals have suffered a cyberattack over the past twelve months. This sharp rise highlights that cyber threats are no longer confined to retailers and financial institutions, the property and facilities management sector is increasingly in the firing line.

The report, from the Royal Institution of Chartered Surveyors (RICS), asked facilities managers, service providers, and consultancies if they had been the victim of a cyberattack over the last year, with 27% saying yes. This number is up from 16% the previous year, showing the growing cyber threat to businesses. On top of this figure, 73% of over 8,000 business leaders believe that their business will be disrupted by a cyber incident within the next one to two years [1].

A Wake-Up Call for Property and Facilities Managers

The RICS report highlights cybersecurity and digital risk as among the most significant and rapidly escalating threats facing businesses today. Alarmingly, some companies continue to rely on outdated operating systems, leaving them exposed to cyberattacks. The report warns that those overseeing commercial properties who do not prioritise cybersecurity measures may face mounting risks, compromising not just day-to-day security but also the long-term viability, operational strength and resilience of their assets [2].

Buildings Sector Increasingly Exposed

The RICS report highlights how the buildings and facilities sector is increasingly exposed to cyber threats. Many commercial properties now rely on connected systems, from access control and building management systems to energy monitoring and smart lighting, which expands the potential attack surface. Inadequate cyber security in these systems can leave both the building and its tenants vulnerable.

The report warns that building managers who fail to prioritise cyber security could not only risk operational disruption but also compromise long-term asset value. As technology continues to shape how buildings are run, cyber security must become a core pillar of property and facilities management strategies.

Evolving Techniques and New Threat Vectors

Cyberattack techniques have become increasingly sophisticated over recent years, with the rise of artificial intelligence being a major contributing factor. Other factors such as a larger attack surface, resulting from expanded use of cloud computing and a higher number of Internet of Things (IoT) devices, have provided hackers with even more potential points of entry [4]. As such, it has become increasingly critical for organisations to ensure that their cybe rsecurity infrastructure is sufficiently secure for the modern world.

The Regulatory and Reputational Risks

Cyber security resilience has become ever more important in recent years, with more stringent regulatory requirements coming into force over the past decade. Regulations such as GDPR and the UK Data Protection Act 2017 impose heavy penalties on organisations that suffer data breaches. However, the reputational damage following these fines can potentially be even more costly. Ensuring compliance with a cybersecurity standard such as ISO 27001 or Cyber Essentials can provide organisations with a crucial lifeline for maintaining their cyber security posture and ensuring their ability to respond to any cyber incidents [5].

How AJC Can Help

AJC works with organisations across all sectors to help them strengthen their cyber security defences, meet regulatory expectations, and respond effectively to emerging threats. As a trusted partner, AJC provides expert guidance on risk assessments, incident response planning, and achieving certifications such as ISO 27001 and Cyber Essentials. We also help clients understand how cyber threats may impact operational resilience. If your organisation is looking to improve its cyber readiness or recover from a recent incident, our team is here to support you.

Contact us on 020 7101 4861 or email us at info@ajollyconsulting.co.uk if you think we can help.

References

• https://www.theguardian.com/business/2025/jun/30/uk-businesses-hit-by-cyber-attack-last-year-report
• https://ebs.publicnow.com/view/CF0E07C5BB9B7B0FCA1B396230F694781C968B40
• https://www.theguardian.com/business/2025/jun/10/m-s-marks-and-spencer-website-online-orders-cyber-attack
• https://securitysenses.com/posts/evolution-cyber-attacks-lessons-staying-safe-2025
• https://cyberexperts.com/the-importance-of-cybersecurity-standards/

Image accreditation. Getty Images from Unsplash.com. Last accessed on 2nd July 2025. Available here.