top of page

Small Businesses see increased Cyber Attacks: The State of Cyberattacks and Cyber Insurance

In today's digital age, small businesses are increasingly becoming prime targets for cyberattacks. The landscape of cyber threats is evolving rapidly, and it's imperative to understand the current challenges small business owners face.

A recent report from the Identity Theft Resource Center (ITRC) sheds light on the growing threat landscape, the impact of cyber incidents, and the role of cyber insurance. In this article, we'll delve into the key findings and discuss why having cyber insurance is more crucial than ever for small businesses.

The Alarming Rise in Cyberattacks

The ITRC's Business Impact Report reveals a concerning trend - over the past 12 months, a staggering 73% of small business owners reported experiencing a cybersecurity incident. This marks the highest percentage of small businesses reporting a cyber event in the three years that the ITRC has been producing the report.

While the number of attacks spiked in 2021, a reduction was observed last year due to external factors such as the Russian invasion of Ukraine and cryptocurrency market disruptions. However, identity crime markets have rebounded in recent times, leading to record levels of breaches, cyberattacks, and their devastating consequences.

The Financial Fallout

The ITRC report indicates that 42% of small businesses that suffered a cyberattack in the past year lost revenue as a result. Although this figure represents a 3% decline compared to the previous year, the repercussions extended beyond financial losses. Small businesses faced challenges such as customer trust erosion, increased employee turnover, and a struggle to comprehend the attack's origins.

The Role of Cyber Insurance

In the face of cyber incidents, the ITRC's findings reveal that 33% of organizations used cyber insurance as their primary source of recovery funding. This underscores the critical role cyber insurance plays in helping businesses bounce back after an attack. Additionally, 29% of businesses dipped into their cash reserves, while around a quarter extended or opened new lines of credit to mitigate the financial impact of the attack.

The Overconfidence Gap

Despite the alarming number of small businesses falling victim to cyberattacks, 85% of survey respondents from the ITRC stated they felt prepared for such events. However, this perception may not align with the reality of their cybersecurity measures.

A separate report from The Hanover found that many small and mid-sized businesses lack fundamental cybersecurity provisions. For example, 62% of these organizations do not provide cybersecurity training for employees, and half do not employ multifactor authentication, a critical security practice.

Moreover, The Hanover survey revealed that 61% of small and mid-sized businesses lack an incident response plan, and 81% do not have a post-breach response team in place. These deficiencies in cybersecurity practices raise serious concerns about the preparedness of businesses in the event of a cyber incident.

The Path Forward

The gap between perception and reality in cybersecurity preparedness is evident. Small businesses must recognize the urgent need for robust cybersecurity measures, including training, incident response planning, and the adoption of cyber insurance policies. The recent surge in cyberattacks serves as a stark reminder that no business is too small to be targeted, and preparation is the key to resilience in the face of evolving cyber threats.

As cyberattacks targeting small businesses reach a three-year high, the need for heightened cybersecurity measures and the inclusion of cyber insurance in risk management strategies cannot be overstated. Small business owners must address the overconfidence gap and take proactive steps to protect their digital assets.

Cyber insurance is a critical tool for mitigating the financial impact of cyber incidents, but it should be complemented by comprehensive cybersecurity practices that align perception with reality. In a digital world rife with evolving threats, preparedness is the ultimate defense.


bottom of page