Website Down? Cyber Attack or Cloud Outage? What UK Businesses Need to Know About Cyber Security Resilience

October 21, 2026

When several well known websites fail in the same afternoon, the first question many of us ask is whether the UK is under cyber attack. It is a fair question, and a very human one.

On 21 October 2026, Downdetector UK showed sudden spikes in problem reports for services including Wikipedia, Internet Archive, Asana, Tes, The Open University, Duolingo and Google Drive. At the time of writing, we had found no confirmed cause and no evidence that a cyber attack was behind it. But the moment is a gentle reminder that website availability sits right at the heart of good cyber security.

Here is how to tell a cyber attack from an outage, what happened this week, and what your business can do to stay calm and resilient when the internet wobbles.

Cyber attack or website outage: how can you tell?

The National Cyber Security Centre (NCSC) describes a denial of service attack as an attempt to overload a website or network so that it slows down or becomes completely inaccessible. When the traffic comes from many sources at once, it is called a distributed denial of service, or DDoS attack. The NCSC notes these attacks remain a credible and prevalent threat. You can read its guidance in the NCSC denial of service collection.

Outages, on the other hand, usually come from something far more ordinary: a power failure, a faulty configuration change, or a technical fault in a hosting provider. From the outside, both look identical. A website simply stops loading. A few clues can help:

If one service is down, it may be a problem with that business alone.
If many unrelated services fail at the same moment, a shared provider is often the cause.
Check your hosting or cloud provider’s status page first, then look at Downdetector and official statements before assuming the worst.

What happened to UK websites this week

On 20 October 2026, Google Cloud suffered what it described as a power event in its London region. According to The Register, the problem began at about 06:08 UTC in one of the three London availability zones and disrupted online services at customers including Lloyds Bank, HSBC, Royal Mail, Rightmove, DPD, BT, Screwfix and Revolut. The Scotsman also reported that the video system used in courts across England and Wales was believed to be affected.

Google pointed to power as the cause, not an attack. The following day, Downdetector UK showed fresh spikes across a different group of services, and the cause had not been confirmed when we published. We will update this post if that changes.

It is also a curious coincidence that 20 October marks one year since the large AWS outage of 20 October 2025, which was traced to a fault in an internal DNS system, and a few weeks later Cloudflare experienced a major disruption caused by a configuration file that grew larger than expected. Neither was a cyber attack. Both showed how far a single technical fault can travel.

Why one cloud failure can take down so many websites

A small number of cloud providers now host a very large share of the internet. That concentration brings speed and convenience, but it also creates what cyber security professionals call supply chain risk: your business can be affected by a problem that has nothing to do with your own defences.

You might have strong passwords, up to date software and a well protected website, and still find your site, your online booking system or your payment provider unavailable because a supplier several steps away has stumbled. Understanding that chain of dependencies is the first step towards real cyber resilience.

Why website availability matters for cyber security

Cyber security is not only about stopping criminals from stealing data. It is also about keeping your systems available to the people who rely on them. When your website is down, you can lose sales, enquiries and customer confidence, and prolonged downtime can affect how search engines crawl and rank your pages.

That is why business continuity planning and cyber security belong together. A calm, practised response protects both your reputation and your revenue.

Eight practical steps to improve your cyber resilience

Know where your website, email and key systems are hosted, and which cloud provider sits behind them.
Write a simple incident response plan. Decide who investigates, who contacts your host and who speaks to customers.
Set up uptime monitoring so you hear about website downtime before your customers do.
Ask your hosting provider about DDoS protection, content delivery networks and whether your site can run across more than one location.
Keep regular backups and store a copy somewhere separate from your main host. Test that you can restore them.
Prepare a short, friendly holding message you can post on social media or a status page if your site goes down.
Review your suppliers. Ask how they handle outages and where their own critical dependencies lie.
Consider working towards Cyber Essentials, the government backed certification that sets out basic cyber security controls.

Cyber security for small businesses: what the latest figures say

The government’s Cyber Security Breaches Survey 2025/2026, published on 30 April 2026, found that 43% of UK businesses, roughly 612,000, identified a cyber security breach or attack in the previous 12 months, along with 28% of charities. Phishing remained the most common type. Medium and large businesses were more likely to report incidents than micro and small ones, though smaller firms are by no means safe.

The survey also found that 72% of businesses rate cyber security as a high priority for senior management, yet only a minority have a formal incident response plan, and supply chain vulnerabilities remain a concern. In other words, most of us care about cyber security, but fewer of us have written down what we would actually do on a difficult day.

How Phoenix Media Marketing can help

We are a marketing agency rather than a cyber security specialist, but outages and security incidents land squarely on our clients’ websites, search visibility and reputation. We can help businesses across West Sussex and the wider UK to keep a fast, well maintained and well hosted website, prepare clear customer communications for moments of downtime, and protect search performance when things go wrong. For a formal cyber security assessment, we are always happy to point you towards a qualified specialist.

If you would like a friendly conversation about making your website more resilient, call us on 01444 523105 or visit phoenixmarketing.uk.

Frequently asked questions

Was the UK under cyber attack on 21 October 2026? At the time of writing, we found no confirmed cause and no evidence of a cyber attack. Downdetector relies on user reports, so a spike shows that people are noticing a problem rather than proving what caused it.

What is a DDoS attack? A DDoS attack floods a website or network with traffic from many sources at once, aiming to make it slow or unavailable.

Can a cloud outage affect my website even if I have not been hacked? Yes. If your site, booking tool or payment provider runs on an affected cloud service, it can go down regardless of how secure your own systems are.

What should I do first if my website goes down? Check your hosting provider’s status page, then Downdetector, and contact your host. If you suspect a genuine attack, follow your incident response plan and use the official reporting routes listed by the NCSC.

Is website downtime a cyber security issue? Yes. Availability is a core part of cyber security, alongside confidentiality and integrity.