Devon and Cornwall Has Highest Cybercrime Rate in UK Study

New research has revealed that Devon and Cornwall records the highest cybercrime rate in the UK, highlighting an unexpected hotspot outside the country’s major cities.

The county-level study, carried out by ramsac, compares reported cybercrime incidents with online search behaviour related to cybercrime. The analysis shows that while cybercrime is often linked to large urban areas, risk is spreading across rural regions and smaller communities.

The findings come as cybercrime continues to grow as one of the fastest rising threats facing UK businesses.

Cybercrime costing UK businesses billions

Independent government research estimates the average cost of a significant cyberattack on a UK business at £195,000. Across the country, cybercrime is believed to cost businesses around £14.7 billion each year, which is roughly 0.5% of the UK’s GDP.

Despite the scale of the problem, awareness of cybercrime risks varies widely depending on where people live.

The study examined both reported crime figures and online search behaviour related to cybercrime. Search volume was used as an indicator of public awareness and concern.

Devon and Cornwall tops the list

According to the research, Devon and Cornwall records the highest cybercrime rate in the dataset, with an average of 123 reported cybercrimes each month. That equates to 4.7 crimes per 10,000 residents.

Greater Manchester ranks second with 4.6 reported cybercrimes per 10,000 residents per month, followed by Staffordshire at 3.6. Other areas appearing in the top ten include Hampshire, North Wales and Derbyshire.

The report notes that the data challenges common assumptions about where cybercrime occurs.

“These findings challenge the assumption that cybercrime is primarily an urban problem,” the independent report notes. “Risk is increasingly distributed across the UK, regardless of geography or population density.”

Awareness does not always match risk

The research also examined how concerned people appear to be about cybercrime by analysing cybercrime-related Google search activity.

Northern Ireland, under the Police Service of Northern Ireland (PSNI), recorded the highest awareness levels, with 36 searches per 10,000 residents. This is despite relatively low reported cybercrime rates.

Greater Manchester ranked second for awareness with 34.7 searches per 10,000 residents. Other areas showing high levels of concern include Northumbria, the West Midlands and Avon and Somerset.

Devon and Cornwall also appears in the top ten for cybercrime awareness, recording 22.1 searches per 10,000 residents.

The gap between risk and concern

By comparing search activity with reported cybercrime figures, the study identified what it calls an “awareness gap”.

This measures the difference between how often cybercrime occurs and how frequently people search online for information about it.

Northern Ireland recorded the largest awareness gap at 34.5. Greater Manchester followed with 30.1, while Northumbria, the West Midlands and Police Scotland also showed significant differences between concern and reported incidents.

Devon and Cornwall recorded an awareness gap of 17.4, placing it eighth in the ranking.

What it means for businesses

The report highlights that awareness is a key part of cyber resilience. When businesses underestimate the risk of cybercrime, they may delay investment in protection or overlook potential vulnerabilities.

Practical steps such as staff training, early warning monitoring and clear incident response planning can help reduce both the likelihood and impact of cyberattacks.

The full research findings can be viewed on the ramsac website: https://www.ramsac.com/blog/uk-cybercrime-awareness/