top of page

State of Cyber Security in Small & Medium Sized Businesses

State of Cyber Security in Small & Medium Sized Businesses

Key Findings

Companies are aware of the threat but believe they are too small to be a target.

Attacks are Proliferating

61% of Small & Medium Businesses were affected by cyber attacks, a 6% increase from 2016

More Data is at Risk

54% of attacks involved data breaches, with an average of 9,350 records stolen

Attacks Are More Sophisticated

81% of malware attacks avoided anti-virus solutions

Email and Personnel are the biggest Threat

65% of all malware is a result of interacting with a phishing/malicious  email

The Rise of Ransomware

Ransomware is defined as a sophisticated piece of malware that blocks the victim’s access to company files.

Ransomware is defined as a sophisticated piece of malware that blocks the victim’s access to company files.

Increase in Frequency

Fifty-one percent of respondents say they experienced an attempted ransomware attack within the past year

Increase in Frequency

Fifty-one percent of respondents say they experienced an attempted ransomware attack within the past year

Laptops/Desktops are the Culprit

78% of ransomware attacks were initiated through a compromised desktop or laptop

Laptops/Desktops are the Culprit

78% of ransomware attacks were initiated through a compromised desktop or laptop

Goodbye Bitcoin

60% of companies paid the ransom to regain access to data

Goodbye Bitcoin

60% of companies paid the ransom to regain access to data

Pay to Play

The average ransom to unlock or decrypt data was $2,157

Pay to Play

The average ransom to unlock or decrypt data was $2,157

Cloud Infrastructure, Bring Your Own Device Culture, & Email Exponentially Increase Attack Surface

Cloud Dominance 
85% of enterprises utilize a hybrid cloud environment. 

The Pourous Cloud 
27% of third party applications pose a "high" security risk, 58% pose medium security risk.

The "Secure" Cloud
8.1% of cloud apps meet "strict" data security and privacy requirements for enterprise grade security controls.

Spam is Taking Over
65% of total email traffic is spam.

Propagation of Adware
75% of organizations are found to be infected with some form of adware. 

*Data from the 2017 State of Cybersecurity in Small & Medium-Sized Businesses (SMB) - Ponemon Institute 

bottom of page