60% of cyberattacks target small businesses

According to the Verizon Data Breach report, 60% of successful cyberattacks target small and medium businesses. Not because they have more valuable data, but because they have minimal protection.

Most common attacks

• Phishing (36%) — fake emails appearing to be from suppliers or banks
• Ransomware (27%) — file encryption with ransom demands
• Credential stuffing (18%) — using stolen passwords from other sites
• Business Email Compromise (12%) — fake emails "from the CEO"

Average cost of an attack

For a small European company, the average breach cost is €42,000. This includes: downtime, data recovery, customer loss, potential GDPR fines. 60% of small businesses that suffer a major attack close within 6 months.

5 immediate actions (under €500)

1. 2FA authentication on all accounts — free, prevents 99% of credential stuffing
2. 3-2-1 automatic backup — 3 copies, 2 different media, 1 offsite
3. Team training — 2 hours/quarter on phishing recognition
4. Automatic updates — OS, browser, CRM, all up to date
5. Unique passwords + manager — each account with a different, auto-generated password