How toxic culture, unhappy insiders and growing unemployment in the UK; The opportunity for hackers to exploit weaknesses

Mate, pull up a chair. We need to have a serious chat about the state of our nation’s digital defences. It’s February 2026, and frankly, the outlook is a bit grim. I’ve been digging through the latest reports and data, and what I see isn’t just a technical problem; it’s a human mess. We’re seeing a perfect storm of toxic workplaces, economic strain, and a workforce that’s frankly had enough. And guess who’s waiting in the wings to exploit this chaos? Hackers.

The cost of a bad vibe

Let’s start with the elephant in the room: toxic culture. I’ve said it before, and I’ll say it again, you can’t firewall a toxic workplace. It turns out that bad vibes are actually costing UK businesses billions. Yep, billions with a ‘B’. That’s not just lost productivity from people staring out the window; that’s the direct financial impact of a culture that makes people miserable.

I find it fascinating that there’s such a massive gap in perception. While 82.7% of employers reckon their workplace atmosphere is “very positive” or “somewhat positive”, only 45.0% of employees agree. That is a catastrophic disconnect. If you’re a boss thinking everything is rosy while nearly half your team is miserable, you’re walking around with blinders on. FYI, ignorance isn’t a defence strategy.

Toxic environments in cybersecurity specifically are even more dangerous. A toxic cybersecurity environment breeds distrust, poor communication, micromanagement, and blame, which completely undermines teamwork and efficiency. When your security team can’t trust each other, they certainly can’t trust the systems they’re supposed to protect.

When the pay freeze bites back

Now, let’s talk money. Or rather, the lack of it. The economic uncertainty of the last few years has left a mark. We saw a massive surge in hiring freezes, layoffs, and budget cuts in 2024. While things seem to be stabilising in 2025, the damage is done. Figures are levelling off, but the caution remains, and it’s adding immense pressure on existing teams.

Economic challenges, skills shortages, and the rapid evolution of the workplace are currently challenging the morale of cybersecurity professionals. Think about that for a second. The very people we rely on to stop the bad guys are the ones feeling the pinch the most. When you combine financial stress with a toxic culture, you don’t just get unhappy employees; you get a ticking time bomb.

Randstad’s 2025 Workmonitor report revealed that jobseekers care deeply about equity-based initiatives and sustainability commitments. People want to work for companies that give a damn. If you’re treating your staff like disposable assets while preaching about “values”, don’t be surprised when they check out. Or worse, when they leave.

Why hackers love a miserable office

Here is where it gets really interesting. Why do hackers care about your HR problems? Because a miserable, overworked, and undervalued employee is the weakest link in your security chain. It’s not just about sophisticated code anymore; it’s about human psychology.

Unhappy insiders are prone to making mistakes. They might click a phishing link they’d usually spot because they’re tired. They might bypass a protocol because they’re rushing to meet a deadline imposed by a skeleton crew. The Global Cybersecurity Outlook 2026 shows that data leaks associated with generative AI and the advancement of adversarial capabilities are top concerns for this year. Hackers are using AI to craft attacks that are harder to spot, and they’re targeting the people most likely to slip up.

The UK is experiencing an evolving cyber threat environment, with attackers deploying increasingly sophisticated tactics against businesses and government bodies. As the economic and budget issues hold back hiring, we see knowledge and competency deficits rise within organisations. You have fewer people doing more work, with less support, facing smarter enemies. Does that sound like a winning strategy to you?

The AI double-edged sword

I know everyone bangs on about AI, but bear with me. The World Economic Forum notes a striking reversal in trends. In 2025, the advancement of adversarial capabilities topped the list of concerns at 47%. By 2026, while still a massive worry at 29%, data leaks associated with genAI have surged to 34%. This means the way we use AI tools internally is becoming a major liability.

However, it’s not all doom and gloom. There is a silver lining. The share of organisations assessing the security of their AI tools has nearly doubled – from 37% in 2025 to 64% in 2026. Companies are finally waking up and introducing structured processes to manage AI securely. It’s about time. We’re seeing a culture shift where cybersecurity is viewed as a core public service responsibility, rather than just a back-office IT function. But is it happening fast enough to outpace the hackers? That remains the billion-pound question.

Fixing the human firewall

So, what do we actually do about this? We can’t just fire everyone and hire new robots. The ISC2 study suggests a mindset shift is happening. Professionals are realising that addressing specific needs isn’t solved just by adding people, but by investing in the professional development of existing team members. It sounds simple, but it’s revolutionary in a sector known for burn and churn.

We need to stop treating cybersecurity professionals as interchangeable cogs. The Budget Lab at Yale found that AI hasn’t actually displaced cognitive labour en masse as predicted, undercutting those fears of mass automation. So, let’s focus on the humans we have.

Here is what leaders need to prioritise right now:

Address the culture gap: Stop assuming your workplace is positive. Ask your staff and actually listen to the answer.
Invest in skills: Instead of hunting for unicorns, train the horses you have. Upskilling existing teams boosts morale and competence.
Secure the AI tools: If 64% of orgs are checking AI security now, make sure you’re one of them.
Recognise the economic strain: Acknowledge the pressure your teams are under. A little empathy goes a long way.

The statistics show a mixed record for the UK. While 74% of large businesses identified a breach or attack in 2025, slightly down from 75% in 2024, we are still a massive target. We have the world’s sixth biggest GDP and a huge financial sector, making us a prime mark for cyber criminals. We cannot rely on luck.

Summary

Look, I don’t mean to be the bearer of bad news, but we have to face facts. The convergence of toxic culture, unhappy insiders, and economic strain is creating a massive vulnerability in the UK’s digital economy. Hackers aren’t just hacking code; they’re hacking the human condition.

We know that toxic workplaces cost billions and that employees feel undervalued while management lives in a fantasy land. We know that economic pressure is stretching our cyber teams to breaking point. And we know that threat actors are getting smarter, using AI to exploit these very weaknesses.

But we also know that awareness is growing. More organisations are securing their AI tools, and there is a push to invest in people rather than just headcount. The opportunity for hackers to strike is undeniably high, but so is our opportunity to fix the root cause. It starts with treating people like human beings rather than resources. TBH, if we fix the culture, the security might just fix itself.

9 Citations

Toxic workplace culture is costing UK businesses billions
https://culture-shift.co.uk/resources/workplace/toxic-workplace-culture-is-costing-uk-businesses-billions/

Toxic Workplace Trends Report 2025 | iHire
https://www.ihire.com/resourcecenter/employer/pages/toxic-workplace-trends-report-2025

The hidden dangers of a toxic cybersecurity workplace – Help Net Security
https://www.helpnetsecurity.com/2025/02/03/rob-lee-sans-institute-toxic-cybersecurity-environment/

The State of the 2025 Cyber Workforce: Skills Gaps, AI Opportunity and Economic Strain
https://www.govtech.com/blogs/lohrmann-on-cybersecurity/the-state-of-the-2025-cyber-workforce-skills-gaps-ai-opportunity-and-economic-strain

2025 ISC2 Cybersecurity Workforce Study
https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study

5 Trends That Will Shape Workplace Culture In 2026
https://www.forbes.com/sites/janicegassam/2025/11/16/5-trends-that-will-shape-workplace-culture-in-2026/