Small Business
We've curated 39 cybersecurity statistics about Small Business to help you understand how threats like phishing and malware are impacting operations and how robust security practices are becoming essential in 2025.
Showing 1-20 of 39 results
43% of affected small businesses say fraud makes it harder to accept payments.
50% of small business owners say financial institutions are "very responsible" for preventing and protecting against fraud.
72% of small businesses experienced fraud, scams, or ransomware last year.
Average losses for small businesses ranged from nearly $60,000 for payment fraud to more than $90,000 for email compromise.
51% of small business owners say business owners themselves are "very responsible" for preventing and protecting against fraud.
51% of small business owners say payment platforms are "very responsible" for preventing and protecting against fraud.
Small businesses incured at least $131 billion in losses from fraud, scams, and ransomware last year.
71% of small business owners expect AI to make fraud more prevalent.
In small organizations, VIP impersonation accounts for 43% of internal impersonation attacks.
40% of affected small businesses say fraud hurts customer acquisition.
Among small businesses already targeted, 76% say AI was used in the attack.
39% of affected small businesses say fraud makes it more difficult to innovate or develop new products.
Smaller organizations are twice as likely to report insufficient resilience compared to large firms.
In 2025, only 38.4% of small business leaders felt 'very prepared' for a cyberattack, down from 56.5% in 2024.
62.5% of small businesses that suffered a breach reported a total financial impact of more than $250,000 in 2025.
81% of small businesses reported suffering a security breach, a data breach, or both in the past year.
AI-powered attacks were identified as a root cause in more than 40% of small business cyber events.
38.3% of small business leaders reported raising prices to address the financial impacts of a cyber incident.
The implementation of critical security measures among small businesses declined from 33.6% in 2024 to 27.2% in 2025.
In 2025, more than 80% of small businesses reported being victims of cybercrime.