UK: 'Worst over' in cyber-attack