Are small businesses really targeted by hackers?
Short answer
Yes. Many attacks are automated and opportunistic, scanning the internet for weak passwords, unpatched systems and staff who will click a link, regardless of company size. Small businesses are also targeted for invoice fraud and as a route into larger customers and suppliers.
The details
Government agencies publish small business guidance precisely because these organizations are frequently affected. The good news is that basic controls block much of this opportunistic activity.
Useful next reads and tools
Terms explained
- Business email compromise
- Business email compromise (BEC) is fraud in which a criminal impersonates or takes over a trusted email account to trick an organization into sending money or sensitive data.
Sources
Related questions
- Where should a small business start with cybersecurity?
- How much should a small business spend on cybersecurity?
- How do I train employees on cybersecurity without boring them?
- What security policies does a small business need?
- What is cyber insurance and does a small business need it?
- How do I secure Microsoft 365 or Google Workspace for a small business?
Related Guides
GuideSmall Business Security
Business Email Compromise: How It Works and How to Stop It
Learn how business email compromise attacks target finance teams and discover concrete controls, verification rules, and policies to protect your company.
Read more GuideSmall Business Security
How to Implement Ransomware Prevention in a Small Business
Learn practical ransomware prevention for small businesses. Protect devices, configure offline backups, secure access, and build an effective defense plan.
Read more GuideSmall Business Security
10 Small Business Cybersecurity Tips to Reduce Risk Fast
Protect your company with ten practical small business cybersecurity tips. Implement MFA, patch software, secure Wi-Fi, and build backups that work.
Read more GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more