Update on Share Buyback Programme

26 January 2026

NCC Group plc

Update on Share Buyback Programme

NCC Group plc (LSE: NCC, "the Company", "NCC Group" or the "Group"), today announces that, the Company has amended the terms of the Share Buyback Programme to purchase ordinary shares of one pence each in NCC ("Ordinary Shares") for a maximum aggregate consideration of up to £70 million or a maximum of 31m shares (the "Share Buyback Programme") with immediate effect, such that, on any given trading day the Share Buyback Programme may exceed 25 per cent, but remain below 50 per cent of the average daily trading volume of the Ordinary Shares. Accordingly, on trading days where the Share Buyback Programme exceeds 25 per cent. of the average daily trading volume, the Company may not benefit from the exemption contained in Article 5(1) of Regulation (EU) 596/2014, as it forms part of UK domestic law by virtue of the European Union (Withdrawal) Act 2018 (as amended) ("UK MAR").

No other changes have been made to the Share Buyback Programme or the basis on which it will be conducted (in each case as announced on 21 January 2026).

Details of any Ordinary Shares repurchased will be notified to a Regulatory Information Service by the Company following any repurchase as required by UK MAR and the UK Listing Rules of the Financial Conduct Authority.

The Company confirms that currently it has no unpublished inside information.

Contact informationInvestor enquiries:

Media enquiries:

About NCC Group plcAbout NCC Group plc NCC Group is a people-powered, tech-enabled global cyber security and software escrow business.

Driven by a collective purpose to create a more secure digital future, c. 2,000 colleagues across Europe, North America, and Asia Pacific harness their collective insight, intelligence, and innovation to deliver cyber resilience solutions for both public and private sector clients globally. With decades of experience and a rich heritage,

NCC Group is committed to developing sustainable solutions that continue to meet client's current and future cyber security challenges.