Owens (Road Services) said it had made further progress in stabilising operations after the cyberattack that brought down its IT systems in 2024 and has now almost halved its losses.

Latest financial figures showed it added almost £2m to its turnover and reported £107m in revenues for the year ending 30 June 2025.

It made a pre-tax loss of £1.7m but this was a significant improvement on the £3.2m loss in 2024 – £2.1m when adjusted for a non-recurring item.

The Welsh family-owned firm suffered a major setback two years ago when it was the target of an attack designed to block access to computer systems in exchange for a ransom payment.

It resulted in all IT systems being offline for a number of weeks.

A substantial warehouse fire also saw profits plummet.

But in its latest results the company said it had delivered strong EBITDA profitability of £6.2m in 2025, benefitting from cost savings, efficiencies and a targeted reorganisation.

The group also secured a number of contract wins during the period across transport and distribution, contract logistics and warehousing, which had strengthened its contracted base.

It made a small operating profit of £40,000, compared to a £1.5m loss in the previous year.

Company directors Huw Owen (left) and Eurof Owen.

Company directors Huw Owen (left) and Eurof Owen

“The business continues to rely heavily on its IT infrastructure and systems to enable it to function efficiently,” Owens said.

“A continuing policy of appraisal and development ensures we keep pace with this ever changing environment.

“As a means to safeguard the integrity of our data we have invested in additional infrastructure and software and have policies in place to keep our systems safe.

“Our backups are both on-site and off-site. Our IT systems are supported by both external service providers and an in-house IT team.

“Following the incident previously experienced, the board has taken sensible and proportionate steps to strengthen systems, improve monitoring and ensure that practical measures are in place to reduce the likelihood and impact of future cyber events.”