Small Businesses Are Attacked by Hackers 3x More than Larger Ones

6 min read

Have you felt more secure from cyberattacks because you have a smaller business? Maybe you thought you couldn’t possibly have anything a hacker could want? Didn’t think they even knew about your small business.

Well, a new report by cybersecurity firm Barracuda Networks debunks this myth. Their report analysed millions of emails across thousands of organisations. It found that small companies have a lot to worry about when it comes to their IT security.

Barracuda Networks found something alarming. Employees at small companies saw 350% more social engineering attacks than those at larger ones. It defines a small company as one with less than 100 employees. This puts small businesses at a higher risk of falling victim to a cyberattack. We’ll explore why below.

Why Are Smaller Companies Targeted More?

There are many reasons why hackers see small businesses as low-hanging fruit. And why they are becoming larger targets of hackers out to score a quick illicit buck.

Small Companies Tend to Spend Less on Cybersecurity

When you’re running a small business, it’s often a juggling act of where to prioritise your cash. You may know cybersecurity is essential, but it may not be at the top of your list. So, at the end of the month, cash runs out, and it’s moved to the “next month” wish list of expenditures.

Small business leaders often don’t spend as much as they should on their IT security. They may buy an antivirus program and think that’s enough to cover them. But with the expansion of technology to the cloud, that’s just one small layer. It would be best if you had several more for adequate security.

Hackers know all this and see small businesses as an easier target. They can do much less work to get a payout than they would be trying to hack into an enterprise corporation.

Every Business Has “Hack-Worthy” Resources

Every business, even a 1-person shop, has data worth scoring for a hacker. Credit card numbers, SSNs, tax ID numbers, and email addresses are all valuable. Cybercriminals can sell these on the Dark Web. From there, other criminals use them for identity theft.

Here are some of the data that hackers will go after:

  • Customer records
  • Employee records
  • Bank account information
  • Emails and passwords
  • Payment card details

Small Businesses Can Provide Entry Into Larger Ones

If a hacker can breach a small business’s network, they can often make a more significant score. Many smaller companies provide services to larger companies. This can include digital marketing, website management, accounting, and more.

Vendors are often digitally connected to certain client systems. This type of relationship can enable a multi-company breach. While hackers don’t need that connection to hack you, it is a nice bonus. They can get two companies for the work of one.

Small Business Owners Are Often Unprepared for Ransomware

Ransomware has been one of the fastest-growing cyberattacks of the last decade. So far, in 2022, over 71% of surveyed organisations have experienced ransomware attacks.

The percentage of victims that pay the ransom to attackers has also been increasing. An average of 63% of companies pay the attacker money in hopes of getting a key to decrypt the ransomware.

Even if a hacker can’t get as much ransom from a small business as they can from a larger organisation, it’s worth it. They often can breach more small companies than they can larger ones.

When companies pay the ransom, it feeds the beast, and more cyber criminals join in. And those newer to ransomware attacks will often go after smaller, easier-to-breach companies

Employees at Smaller Companies Usually Aren’t Trained in Cybersecurity

Another thing is not usually high on the list of priorities for a small business owner. We’re talking about ongoing employee cybersecurity training. They may be doing all they can to keep good staff. Plus, priorities are often sales and operations.

Training employees on spotting phishing and password best practices is often impossible. This leaves networks vulnerable to one of the biggest dangers, human error.

In most cyberattacks, the hacker needs help from a user. It’s like the vampire needing the unsuspecting victim to invite them inside. Phishing emails are the device used to get that unsuspecting cooperation.

Phishing causes over 80% of data breaches.

A phishing email sitting in an inbox can’t usually do anything. The user needs to either open a file attachment or click a link that will take them to a malicious site. This then launches the attack.

Teaching employees how to spot these ploys can significantly increase your cybersecurity. Security awareness training is as essential as having a strong firewall or antivirus.

Other articles you may find useful

IT Consulting Services in London | Penntech IT Solutions

Need Affordable IT Security Services for Your Small Business?

Reach out today to schedule a technology consultation. We offer affordable options for small companies. This includes many ways to keep you protected from cyber threats.

Do you need the best IT Support for your business?

You need the best IT support in London. Technology is complicated and expensive. It’s so hard to maintain everything and know what to do when something breaks or goes wrong. IT problems can really put a damper on your day. They’re frustrating, time-consuming, and can seem like a never-ending cycle of issues.

We’re unique because…

  • We don’t tie our clients into long-term contracts we don’t feel the need to
  • We don’t enforce our technical stack on you | each client’s needs are bespoke, and we work for you, not for us
  • We have 5* Google ratings from genuinely satisfied clients
  • 80% of our growth has been through current client referrals
  • We’re proud to have 100% client retention since Penntech was established
  • We’ve achieved the above through our customer obsession, passion for innovation, and commitment to service excellence.  Everyone could say that but ask our current clients.

We’re always just a phone call away; we live and breathe IT services. We’re here to help your business with anything that could go wrong with your systems or devices. We’re ready to solve any problem you throw our way!

Contact us today or explore the range of support packages on offer.

Me Mo
10 February 2023
We cannot recommend Penntech highly enough for their continuous IT support, we have worked with them for years and there is truly nothing that they cannot solve or help with. Their vast amount of knowledge and speed in response is second to none.
Alasdair Gray
6 February 2023
We have been using Penntech for around 6 years now and have had a great experience. Every member of the team we interreact with is friendly and helpful and our queries are always answered quickly.
Chris Sheasby
22 March 2021
I've known Lewis since working with him at CIFF in 2011. More recently, he has built-up an excellent business which supports a number of my past and present clients. He also supports my business. Lewis is first rate and equally importantly, he has built a good team around him to provide quality, responsive IT support. I can't recommend Penntech highly enough.
Rebecca Groves
20 July 2020
Penntech have worked with us for a number of years now and have always gone above and beyond to provide an efficient professional service in every circumstance. Their friendly responsive approach is refreshing and nothing is too big or too small to assist with.
nick groves
20 July 2020
Lewis and his team are fantastic! Highly recommended
Demstone Chambers
29 May 2020
Friendly and approachable, but also excellent technically. As a barristers chambers we have industry-specific data protection requirements. Penntech showed in-depth knowledge about the interaction between these requirements and technical IT aspects.
Marion Caillat
20 May 2020
Penntech helped us migrate and merge our inbox's for our small restaurant and bar group. They were super efficient and got everything done within 24 hours. I highly recommend them and will be using them again.
Jonathan Davies
18 May 2020
Heartstyles have worked with Penntech for 3 years. The initial brief to sort out our global IT requirements. Penntech have always been refreshing clear in their comms, avoiding IT gobbledygook. No job has been too small to support and they always deliver above and beyond what was required and within budget. They clearly know what they’re doing and the level of service is always outstanding
leigh ryan
18 May 2020
Lewis and the team at Penntech are seen very much as an extension of our business. They are professional, technically brilliant, don't over complicate things, very friendly and the staff feel comfortable dealing with them on a daily basis. They have a good understanding of our needs and go above and beyond to ensure we can get on with our day to day business, safe in the knowledge that if anything goes wrong technically that Penntech will resolve it efficiently. Leigh Ryan, CIO, MGAM Ltd

Related news

View all News

Menu