What happened in October 2025
Microsoft ended mainstream and extended support for Windows 10 on **14 October 2025**. Since that date, no further security patches, bug fixes, or feature updates are being released for any edition of Windows 10.
For businesses, this is not an abstract risk. Unpatched operating systems are a primary attack vector — ransomware campaigns routinely scan for known vulnerabilities in unsupported OS versions. Running Windows 10 today is similar to running Windows 7 after its 2020 end-of-life: you're a soft target.
How many UK businesses are still affected?
Industry estimates suggest that by mid-2026, roughly **20–25% of business PCs in the UK** are still running Windows 10. The reasons vary:
If any of these apply to your organisation, this guide is for you.
Your three options
Option 1: Upgrade to Windows 11 (preferred)
Most PCs purchased after 2019 meet the hardware requirements for Windows 11:
**Check compatibility**: Run the [PC Health Check app](https://support.microsoft.com/en-us/windows/how-to-check-if-your-device-meets-windows-11-system-requirements) from Microsoft. In a managed environment, your IT team can run this across all devices centrally.
If the hardware passes: upgrading from Windows 10 to Windows 11 is a straightforward in-place upgrade. Most organisations complete it without reinstalling applications.
Option 2: Replace incompatible hardware
For older devices that fail the Windows 11 check, the calculus often favours replacement over mitigation:
When replacing, consider:
Option 3: Extended Security Updates (ESU) — as a bridge only
Microsoft offers paid **Extended Security Updates** for Windows 10 at £25–£50 per device per year (pricing varies by volume licensing). ESU provides critical and important security patches only — no new features, no bug fixes beyond security.
ESU is a legitimate short-term bridge if:
ESU is **not** a long-term strategy. It's an expensive sticking plaster.
The hidden costs of doing nothing
Beyond the licensing angle, running unsupported Windows 10 carries:
**Cyber insurance implications**: Many cyber liability policies include clauses around patching and supported OS versions. A claim arising from an exploit on an unsupported system may be disputed.
**GDPR exposure**: If personal data is compromised on an unpatched machine, the ICO will scrutinise whether the organisation had taken "appropriate technical measures" — running an OS with known, unfixed vulnerabilities is difficult to defend.
**Compliance frameworks**: If you're pursuing Cyber Essentials certification (increasingly required for government contracts), running unsupported software will result in an automatic fail.
**Productivity drag**: Windows 11 brings meaningful improvements to Teams integration, multi-monitor support, and security tooling that reduce friction for staff.
Migration checklist
Before you upgrade or replace:
How SmartPath IT can help
We've managed Windows 10-to-11 migrations for SMEs across West Yorkshire and across the UK. Our approach:
If you're still running Windows 10 on any business devices, [schedule a free audit](#contact) and we'll give you a clear picture of what needs doing and what it'll cost.