On April 3, the U.K. Department for Digital, Culture, Media and Sport published the Cyber Security Breaches Survey. Only 32% of U.K. businesses contacted for the survey said their data was breached or attacked, a decrease from 2018’s 43%. While that 11% decline might seem like a congratulatory statistic, it may underscore a trend of a smaller group of companies being successfully—and more frequently—targeted with cyberattacks.

The report was conducted with 1,500-plus U.K. businesses and 514 U.K. registered charities between October and December 2018. The fourth annual report is the first cybersecurity breach survey conducted after the GDPR went into effect.