G20 Summit to bring greater cyber security risk to Greater Manchester businesses

Following the announcement that Manchester city centre will host the G20 Summit in 2027, the North West Cyber Resilience Centre (NWCRC) is urging businesses across the city-region to review their cyber security.

With the summit set to bring the region’s businesses into contact with new suppliers, contractors and customers, the NWCRC is warning businesses to ensure checks are in place now to reduce the risk of falling victim to a cyber attack.

The Government Cyber Security Breaches Survey 2025/6 found that almost half (43%) of UK businesses identified a cyber breach or attack in the previous 12 months, while 38% identified a phishing attack. 

Hotels, transport providers and event venues are among the most likely to be targeted with larger attacks as world leaders descend on Greater Manchester, although all businesses dealing with suppliers and customers ahead of the event will be at greater risk of invoice and payment fraud.

Chief Inspector Dan Giannasi (pictured), who heads up the NWCRC team, said:

“Hosting the G20 is a fantastic opportunity for the region’s business sector. However, businesses need to be on high alert around potential cyber attacks and fraud. 

“Fraudsters often target businesses, such as hotels and suppliers, around large events. This often takes the form of invoice fraud, or impersonation in order to gain financial details, as well as phishing attempts through fake emails or text messages, for example.” 

CI Giannasi has highlighted the three main cyber risks for the hospitality and events industry to be aware of over the next year: 

• Impersonation: Fake emails or online messages may claim to relate to existing bookings and express urgent changes to plans. Staff should always exercise caution and double check all changes to plans or unexpected requests. 
• Fake invoices and changed bank details: A fraudulent invoice may look like it comes from a real supplier or contact. Businesses should verify contact details and new payment details independently before transferring money.
• Phishing and malware: A phishing email, text message or social media message could lead to a link that is actually malware, which can take over the email account, or even the whole IT system. 

Businesses should keep devices and software updated, protect important accounts with multi-factor authentication and make it easy for staff to report suspicious messages. CI Giannasi added,

“We also strongly advise all businesses across the region to start work on their cyber defences now, and consider working towards their Cyber Essentials certifications, which demonstrates to your supply chain that you take cyber security seriously.”

The NWCRC is part of a Home Office funded network across England and Wales offering free Crime Prevention Meetings and guidance for small businesses to build their defences against growing cyber attacks. Businesses are strongly urged to use the free training and assets to ensure their employees understand cyber risks and the impact of one single click on a phishing message.