{"id":6984,"date":"2021-05-18T12:53:00","date_gmt":"2021-05-18T20:53:00","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=6984"},"modified":"2021-06-02T08:02:22","modified_gmt":"2021-06-02T16:02:22","slug":"8-reasons-why-you-need-small-business-cyber-security","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/","title":{"rendered":"8 Reasons Why You Need Small Business Cyber Security"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><a href=\"https:\/\/www.ibm.com\/security\/data-breach\">IBM\u2019s 2020 Cost of Data Breach Report<\/a> states that the average cost of a data breach for small organizations was $2.35 million (&lt;500 employees) and $2.53 million (for small businesses with 500-1,000 employees). So, if you think cybersecurity is not your top priority, think again. We\u2019ll give you eight critical reasons why small business cybersecurity matters<\/h2>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignright size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-data-breach-avg-total-cost.png\" alt=\"Small business cyber security graphic: This IBM 2020 bar chart showcases the average total cost of a data breach in comparison to the size of the affected organization\" class=\"wp-image-6985\" width=\"540\" height=\"399\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-data-breach-avg-total-cost.png 774w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-data-breach-avg-total-cost-300x222.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-data-breach-avg-total-cost-768x568.png 768w\" sizes=\"(max-width: 540px) 100vw, 540px\" \/><figcaption>A screenshot of a chart from IBM\u2019s 2020 Cost of a Data Breach Report that breaks down the average total costs by the size of the affected organization<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Owning or operating small or medium-sized business (SMB) is easier said than done. It takes a lot of time, hard work, and dedication in terms of resources. Protecting your small business from cybercriminals is much the same. Unfortunately, when it comes to small business cyber security, some owners choose to skip a step here and there and wind up falling prey to cybercrime.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data from <a href=\"https:\/\/enterprise.verizon.com\/resources\/reports\/2020-data-breach-investigations-report.pdf\">Verizon\u2019s 2020 Data Breach Investigations Report<\/a> (DBIR) indicates that small businesses represent 28% of the data breach victims reported in 2019. Again, that\u2019s just the <em>registered<\/em> number that Verizon knows about and studied. There are likely many other SMB-related data breaches that are unknown or have gone unreported. Considering that t<a href=\"https:\/\/cdn.advocacy.sba.gov\/wp-content\/uploads\/2020\/06\/04144224\/2020-Small-Business-Economic-Profile-US.pdf\">he U.S. Small Business Administration\u2019s (SBA) Office of Advocacy<\/a> reports that 99.9% of all businesses in the United States are small businesses (having fewer than 500 employees), this means that there are a lot of companies that are likely to get hit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/f.hubspotusercontent40.net\/hubfs\/4887240\/Sectigo_StateofSMBSecurity_2.23.21_v3.pdf\">Sectigo\u2019s 2021 Sectigo State of Website Security and Threat Report<\/a> indicates that 48% of SMBs say they\u2019re \u201ctoo small\u201d for cybercriminals to target. This is particularly troubling considering that <a href=\"https:\/\/www.keeper.io\/hubfs\/PDF\/Cybersecurity%20in%20the%20Remote%20Work%20Era%20-%20A%20Global%20Risk%20Report.pdf\">Keeper Security and the Ponemon Institute<\/a> report that fewer than half of their survey respondents believe their organizations\u2019 risk and attack mitigation efforts are practical. Since the start of the COVID-19 pandemic in early 2020, the percentage of confident employees dropped 27%, from 71% to 44%.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we look at this data in the context that more than one-in-four victims of cyber attacks are SMBs, it\u2019s clear to see why small business cyber security should be among your top priorities.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Small Business Cyber Security Matters to You &amp; Your Customers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In a nutshell, cybersecurity for small businesses helps you keep your data \u2014 which includes everything from your employees\u2019 and customers\u2019 personal information to your sensitive intellectual property \u2014 secure. This isn\u2019t just crucial from a data security standpoint; it\u2019s also a compliance requirement. If you don\u2019t protect your data, you become non-compliant and may face fines and penalties. Furthermore, you\u2019ll lose the trust of your key stakeholders\u2026 and this may be something that your organization\u2019s reputation may never recover from.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But just how bad can a cyber attack be for organizations? Let\u2019s consider the following example to illustrate the damage and confusion cyber attacks can cause:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bristolpost.co.uk\/news\/bristol-news\/bristol-schools-targeted-cyber-criminals-5200132\">Bristol schools<\/a> in the United Kingdom announced they were the target of a highly sophisticated ransomware attack on March 16, 2021. The Castle School Education Trust (CSET), which oversees seven of the 23 schools that have recently come under attack (including those in Bristol), says that the attack aimed to cause live classes to cancel. <a href=\"https:\/\/www.bristolpost.co.uk\/news\/bristol-news\/latest-ransomware-attack-24-schools-5308911?web_view=true\">BristolLive reports<\/a> that more than 1,000 devices have been infected and are being rebuilt, along with 16 servers that are responsible for core functions, including access management.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although the South Gloucestershire Council says the March 16 attack didn\u2019t appear to affect personal data, BristolLive reports that it caused many other issues for the school:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Staff are unable to access key IT systems, databases, and files,<\/li><li>Remote learning lessons have been lost, and<\/li><li>Teachers are unable to access integrated teaching technologies.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Okay, so this ransomware attack targeted schools. What does that have to do with small business cyber security? Data from the <a href=\"https:\/\/secure2.sophos.com\/en-us\/medialibrary\/pdfs\/whitepaper\/sophos-state-of-ransomware-2021-wp.pdf\">Sophos State of Ransomware Report 2021<\/a> shows that 37% of their survey respondents indicate that their mid-size organizations had been hit by at least one ransomware attack. The average ransom paid by a mid-sized organization was $170,404. And even in cases where companies paid the ransom demands, only companies report an average of 65% of the data was restored.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a small business owner, that\u2019s a lot of money to gamble with no guarantee that you\u2019ll regain access to your data or control of your IT systems. And considering that ransomware attacks are only one type of cyber attack targeting small businesses, it should be pretty clear why small business cyber security matters. However, if you need a few more reasons, we\u2019ve got them for you&#8230;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Small Businesses Have Lots of Data to Protect<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Where start-ups and small businesses often lack value in terms of money, they often make up for in rich data. Many attackers recognize the value of data (particularly intellectual property and personal information) and view it as a valuable resource to steal, use, barter, or sell.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most recent data from Verizon\u2019s 2020 DBIR reveals that 86% of the breaches in 2019 were financially motivated, and 10% were motivated by espionage. More than 50% of the actors (cybercriminals) have ties to organized crime, and around 10% are affiliated with foreign nations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While some small businesses lack money, they might be a rich source of data. Cybercriminals often use the stolen data in many ways, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Using personally identifiable information (PII) to carry out identity fraud.<\/strong> The <a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2020_IC3Report.pdf\">FBI IC3<\/a> report observed a substantial rise in identity theft in 2020. The figure below shows the identity theft data for the last three years:<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"740\" height=\"468\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/identity-theft-complaints-uspublic.png\" alt=\"A bar chart using FBI IC3 2020 data that shows the drastic jump in identity theft complaints from victims in the U.S. public\" class=\"wp-image-6987\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/identity-theft-complaints-uspublic.png 740w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/identity-theft-complaints-uspublic-300x190.png 300w\" sizes=\"(max-width: 740px) 100vw, 740px\" \/><figcaption>Data source: FBI IC3. This bar chart showcases the drastic jump in identity theft complaints from victims in the U.S. public<\/figcaption><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Carry out phishing attacks against your customers or users while impersonating your company.<\/strong> The IC3 report also states that phishing scams have increased from 114,702 in 2019 to 241,342 in 2020, an increase of 110.41% (more than double!!).<\/li><li><strong>Selling or trading the personal or financial data they steal on the dark web to other cybercriminals and crime syndicates.<\/strong> A parallel market has developed for stolen data on the dark web to sell IDs and credit card info. <a href=\"https:\/\/www.privacyaffairs.com\/dark-web-price-index-2021\/\">Privacy Affairs<\/a> reports that the price of a cloned Mastercard with PIN rose from $15 last year to $25 this year. Also, cards stolen from US users were cheapest at $17 apiece, whereas card data from Israeli cardholders sells for $65 per card.<\/li><li><strong>Using or selling your trade secrets or intellectual property to your competitors.<\/strong> Verizon\u2019s 2020 DBIR also states that 30% of the data breaches involve internal actors. The actors can use a disgruntled employee to gain access to the company\u2019s data. This data might be sold to a competitor by the criminals for a price. General Electric faced a similar situation where an employee of the company established an enterprise manufacturing competitive goods by using the stolen data.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">An example of the last bullet point can be seen with <a href=\"https:\/\/www.fbi.gov\/news\/stories\/two-guilty-in-theft-of-trade-secrets-from-ge-072920\">Jean Patrice Delia, a former General Electric employee<\/a>. Delia, along with a former GE IT employee named Miguel Sernas, downloaded thousands of proprietary files from the company, including valuable data on advanced computer models for calibrating turbines the company manufactured. Delia started his own company and competed (and won) for tenders against GE for quite some time before GE realized the breach that included Sernas and Delia. After a lengthy court battle, both former employees were imprisoned, and GE received $1.4 million in restitution.&nbsp; &nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Cybercriminals May Target You as a Way to Attack \u201cBigger Fish\u201d<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercriminals sometimes attack small businesses as a way to get to the larger companies and organizations they\u2019re affiliated with. Essentially, you\u2019re not their true target \u2014 rather, you\u2019re merely a stepping-stone or their means to an end. Ouch. Yeah, we know that stings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Don\u2019t think this is possible? Here are a few examples of small business cyber security attacks where threat actors used other companies as an attack vector to gain access to other or bigger targets:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Target data breach.<\/strong> Hackers broke into the systems of HVAC, refrigeration, heating, and air-conditioning subcontractor to attack a bigger company, <a href=\"https:\/\/krebsonsecurity.com\/2014\/02\/target-hackers-broke-in-via-hvac-company\/\">Target, in 2013<\/a>. This single breach was responsible for the stolen data of 40 million customers. Later in 2017, Target agreed to pay $18.5 million to settle claims by 47 states and the District of Columbia to resolve a multi-state investigation for the breach.<\/li><li><strong>U.S. utilities.<\/strong> In 2018, hundreds of contractors and sub-contractors of the <a href=\"https:\/\/www.wsj.com\/articles\/americas-electric-grid-has-a-vulnerable-back-doorand-russia-walked-through-it-11547137112\">U.S. power grid<\/a> were targeted to form the base from which a foreign government planned to attack the nation\u2019s electric grid. The Russian campaign to take down the power stopped in its tracks when the FBI and Homeland Security took stern actions. They notified the unsuspecting contractors that their systems had been breached.<\/li><li><strong>Acer.<\/strong> Although Acer hasn\u2019t openly admitted to it, <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/computer-giant-acer-hit-by-50-million-ransomware-attack\/\">BleepingComputer<\/a> reports that the threat actor group REvil hit the tech giant with a ransomware attack in March 2021. With a $50 million ransomware demand, BleepingComputer reports Acer faces the largest ransomware demand known to date. The article also states that the attack may have resulted from exploiting a vulnerability in an Acer domain Microsoft Exchange server.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">3. Small Businesses Have Fewer Resources to Dedicate to Cyber Security<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Next up on our list of why small business cyber security matters\u2026 Data from Sectigo\u2019s 2021 State of Website Security and Threat report shows that 60% of small businesses spend $500 or less on cybersecurity per month. With the rising cyber threats that SMBs expect to face in 2021, 49% of companies indicate that they\u2019re planning to spend more on cybersecurity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cheapsslsecurity.com\/blog\/small-business-website-security-study\/\">Small businesses will have less stringent security<\/a> and the cybercriminals are aware of this vulnerability. This is often because of entrepreneurs\u2019 limited resources. To set up their businesses, entrepreneurs often take on many responsibilities to conserve labor and financial resources. This can be dangerous as many entrepreneurs aren\u2019t IT security or small business cybersecurity experts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A significant proportion of the labor new businesses employ often focuses on starting the business efficiently, generating new ideas to take over the market, setting up processes and people at various levels, and other tasks for the business setup. Moreover, due to a lack of capital, increasing staffing beyond a certain level may seem impossible. As a result, cybersecurity is often deprioritized. Even if they invest in anti-virus and anti-malware tools, they often can\u2019t spare enough people to keep tabs on everything.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. SMBs Must Follow and Adhere to Applicable Industry and Government Regulations<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Small businesses must comply with rules and regulations set up by governing authorities. Some of these compliance standards are mentioned below:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>If you accept payment from your online customers, you are obligated to follow the PCI DSS requirements.<\/strong> <a href=\"https:\/\/www.pcisecuritystandards.org\/\">The Payment Card Industry Data Security Standards<\/a>, or PCI DSS, are the standards mandated by all the major credit card companies to ensure the safety of the data. These standards define businesses\u2019 operational and technical requirements to accept and process online payments. If you fail to comply with the requirements of PCI\/DSS, you might have to pay heavy penalties.<\/li><li><strong>Federal agencies and government contractors must follow specific rules and regulations outlined by NIST and FIPS.<\/strong> For example, the United States government contractors must follow the <a href=\"https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-171\/rev-2\/final\">National Institute of Standards and Technology\u2019s (NIST) SP 800-171<\/a> cybersecurity standards. Covered organizations must comply with these 14 standards, which are pre-defined for the different areas of an organization.<\/li><li><strong>In addition to NIST, US defense contractors must also be DFARS compliant.<\/strong> As defined in <a href=\"https:\/\/www.law.cornell.edu\/cfr\/text\/48\/252.204-7012\">DFARS \u00a7 252.204-7012<\/a>, there are 110 security requirements that covered organizations must fulfill. Also, the cloud service used should be FedRAMP compliant.<\/li><li><strong>U.S. healthcare organizations must be HIPPA (Health Insurance Portability and Accountability Act) compliant.<\/strong> <a href=\"https:\/\/www.herjavecgroup.com\/wp-content\/uploads\/2019\/12\/Healthcare-Cybersecurity-Report-2020.pdf\">The Herjavec Group\u2019s 2020 Healthcare Cybersecurity Report<\/a> concludes that more than 93% of healthcare organizations have experienced a data breach over the past three years, and 57% have had more than five data breaches during the same timeframe. <a href=\"https:\/\/www.ibm.com\/security\/data-breach\">IBM<\/a> reported that the average data breach cost of the healthcare industry was the highest amounting to $7.13 million.<\/li><li><strong>Organizations globally that handle the personal data of people located in the European Union must abide by General Data Protection Regulation (GDPR).<\/strong> All entities that collect, store, or process PKII of people located in the EU must follow these guidelines regardless of their organizations\u2019 sizes and locations. This means that international organizations also fall under the purview of <a href=\"https:\/\/gdpr-info.eu\/\">GDPR<\/a> when they handle said data. Non-compliance can cost companies upwards of 4% of their annual gross revenue or \u20ac20 million (whichever is greater) in fines. &nbsp;<\/li><li><strong>CCPA (California Consumer Privacy Act) is a state statute that protects the data privacy and rights of California consumers. <\/strong>The <a href=\"https:\/\/ccpa-info.com\/\">CCPA<\/a>, which went into effect on Jan. 1, 2020, is a security regulation that applies to organizations doing business in California. Covered organizations that this regulation applies to collect California consumers\u2019 personal data and meet one or more specified thresholds relating to revenues or the amounts of personal data they buy, use, or sell.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CCPA violators must pay up to $2,500 or $7,500 for unintentional and intentional violations, respectively. Companies that experience data breaches or data theft also may have to pay statutory damages of $100-750 (or the actual damage, whichever is higher) per incident to California residents.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Your Business\u2019s Brand and Reputation Are at Stake<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If cybercriminals attack your organization&#8217;s IT devices, infrastructure or website and successfully steal data, your customers may think twice before doing business with you again. You become a liability in their eyes, and they\u2019ll likely turn to your competitors in the future than risk their data being involved in another of your small business cybersecurity attacks or data breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sectigo&#8217;s 2021 Website Security and Threats study observed that 28% of breached SMBs suffered &#8220;severe&#8221; to &#8220;very severe&#8221; consequences as the result of website breaches:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"741\" height=\"449\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-website-breaches.png\" alt=\"Small business cyber security pie chart shows the severity of website breaches, according to data from Sectigo\" class=\"wp-image-6988\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-website-breaches.png 741w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-website-breaches-300x182.png 300w\" sizes=\"(max-width: 741px) 100vw, 741px\" \/><figcaption>Data source: Sectigo\u2019s 2021 Sectigo State of Website Security and Threat Report.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">These consequences include everything from loss of intellectual property and customers to reputational loss and website downtime.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One way to help secure your data on websites is to use an SSL\/TLS certificate to ensure you&#8217;re serving your website via a secure, encrypted HTTPS protocol. Our April 2020 survey data shows that just <a href=\"https:\/\/cheapsslsecurity.com\/blog\/small-business-website-security-study\/\">slightly more than half (52%) of small websites use HTTPS<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Data Breaches Aren\u2019t Only Caused by Outside Threats<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">While external threat actors are bad, they\u2019re not the only people you have to worry about for small business cyber security. <a href=\"https:\/\/enterprise.verizon.com\/resources\/reports\/2020-data-breach-investigations-report.pdf\">Verizon\u2019s 2020 DBIR<\/a> points out that 30% of the 2019 data breaches they studied involved internal actors \u2014 both intentional and unintentional users. Some employees make mistakes (human error) while others choose to do bad things intentionally. Both types of employees, those who know the full consequences of their actions and those who are oblivious to them, pose serious threats to your organization.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is why access controls are critical to small business cybersecurity. (Of course, it\u2019s critical to ALL organizations\u2019 cyber defenses, but we\u2019re just focusing on SMBs for this article.) This approach limits access to sensitive IT systems and data to only select employees who require it to do their jobs. This process involves setting up strict access controls, including the use of secure authentication tools and setting user permissions for privileged users.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access controls are a must for companies across all industries, and the financial services industry is no exception. <a href=\"https:\/\/info.varonis.com\/hubfs\/docs\/research_reports\/2021-Financial-Data-Risk-Report.pdf?utm_content=146358482&amp;utm_medium=social&amp;utm_source=twitter&amp;hss_channel=tw-21672993\">Varonis<\/a>\u2019 research suggests that all financial services employees have access to an average of 11 million files from the first day they walk in. Nearly two-thirds of the financial service companies have more than 1,000 sensitive files open to all of their employees. This poses a serious security risk because it means that if even just one of those employees\u2019 credentials becomes compromised, the cybercriminal who uses them gains access to all of those files, IT systems and data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Needless to say, controlling access to your sensitive data is a must. Taking these steps might help prevent your small business from becoming the focus of the next cybercrime-related headline.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Moving Your Business to the Cloud Requires Planning<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cloud technologies are incredible resources for small businesses \u2014 but they don\u2019t come without risks. And if you try to do this without having the appropriate cybersecurity measures and IT support in place, you might as well just hand your data over to cybercriminals directly. According to IBM\u2019s 2020 Cost of Data Breach Report, cloud misconfiguration was a root cause of 19% of the malicious data breaches they studied. Also, cloud misconfigurations increased the average cost of a data breach by14%.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following are some of the noteworthy cloud-based data breaches:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Bonobos: <\/strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/bonobos-clothing-store-suffers-a-data-breach-hacker-leaks-70gb-database\/\">BleepingComputer reports<\/a> a 70 GB database owned by the clothing retailer Bonobos was leaked by a cybercriminal group known as ShinyHunters. Million of records \u2014 including the personal data of Bonobos\u2019 customers, their partial payment information, transactions, and password histories \u2014 were published online in a single SQL file. The threat actors were able to access and download the database through the company\u2019s cloud backup.<\/li><li><strong>VIPGames:<\/strong> <a href=\"https:\/\/www.wizcase.com\/blog\/vipgames-data-breach\/#:~:text=The%20WizCase%20team%20of%20white,gaming%20website%2C%20VIPGames.com.&amp;text=If%20such%20data%20had%20fallen,scamming%2C%20espionage%20and%20malware%20infestation.\">WizCase<\/a> reports a whopping 30 GB of data \u2014 including 23 million records and data relating to 66,000 VIPGames users \u2014 were exposed due to cloud misconfiguration. Thankfully, the leak was discovered by WizCase white hackers who were researching open servers. Had it been discovered by cybercriminals instead, the results could have been devastating.<\/li><li><strong>Elasticsearch: <\/strong><a href=\"https:\/\/www.vpnmentor.com\/blog\/report-mailfire-leak\/\">vpnMentor reports<\/a> an anonymous hacker informed them of a massive 882.1 GB data leak affecting hundreds of thousands of users globally and 70+ dating and e-commerce sites. All the impacted websites were using Mailfire marketing software, and Mailfire claimed responsibility for the security incident since they owned the exposed Elasticsearch server.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">8. Adopting Remote Work Capabilities Requires Greater Cyber Security<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The onslaught of the COVID-19 global pandemic has led to a substantial increase in the remote workforce for more than a year. Some companies are like <a href=\"https:\/\/blog.google\/inside-google\/life-at-google\/hybrid-approach-work\/\">Google<\/a> are adopting a hybrid approach to work. As you can imagine, this approach requires a greater focus on small business cybersecurity \u2014 and having security-focused processes and policies in place before making that change is critical.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, it seems that not all businesses have received that memo, as the saying goes. Data from&nbsp;<a href=\"https:\/\/www.alliantcybersecurity.com\/the-flight-to-remote-working-cybersecurity\/\">Alliant Cybersecurity<\/a>&nbsp;shows that 22% of small businesses allow employees to work remotely without first developing a clear cybersecurity prevention policy. &nbsp;Not having those prevention measures in place can lead to potentially substantial consequences. IBM\u2019S 2020 Cost of Data Breach Report data indicates that remote work increased the average cost of a data breach by $137,000.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Thoughts on Small Business Cyber Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Inadequate cybersecurity measures affect everything for small businesses. From your ability to protect your intellectual property and customer data to your compliance with industry regulations, it\u2019s easy to see why small business cybersecurity matters.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Considering that IBM\u2019s 2020 data reports $7.68 million as the average costs to small businesses (those with 500 or fewer employees), it\u2019s easy to see why small business cyber security needs to become a top priority. The truth is that cybercriminals aren\u2019t going anywhere, and industry leaders expect cyber-related breaches and attacks to occur with greater frequency in the years to come. Every small business needs to take the time now to build strong cyber defenses before they find themselves in a threat actor\u2019s sights.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IBM\u2019s 2020 Cost of Data Breach Report states that the average cost of a data breach for small organizations was $2.35 million (&lt;500 employees) and $2.53 million (for small businesses with 500-1,000 employees). So, if you think cybersecurity is not your top priority, think again. We\u2019ll give you eight critical reasons why small business cybersecurity<\/p>\n","protected":false},"author":8,"featured_media":6990,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[417],"tags":[421,448],"class_list":["post-6984","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-featured","tag-small-business-cyber-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>8 Reasons Why You Need Small Business Cyber Security<\/title>\n<meta name=\"description\" content=\"Small business cyber security can&#039;t wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"8 Reasons Why You Need Small Business Cyber Security\" \/>\n<meta property=\"og:description\" content=\"Small business cyber security can&#039;t wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Savvy Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cheapsslsecurities\" \/>\n<meta property=\"article:published_time\" content=\"2021-05-18T20:53:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-02T16:02:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Savvy Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Savvy Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/\"},\"author\":{\"name\":\"Savvy Security\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"headline\":\"8 Reasons Why You Need Small Business Cyber Security\",\"datePublished\":\"2021-05-18T20:53:00+00:00\",\"dateModified\":\"2021-06-02T16:02:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/\"},\"wordCount\":3152,\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/small-business-cyber-security-feature.jpg\",\"keywords\":[\"featured\",\"small business cyber security\"],\"articleSection\":[\"SMB Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/\",\"name\":\"8 Reasons Why You Need Small Business Cyber Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/small-business-cyber-security-feature.jpg\",\"datePublished\":\"2021-05-18T20:53:00+00:00\",\"dateModified\":\"2021-06-02T16:02:22+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"description\":\"Small business cyber security can't wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/small-business-cyber-security-feature.jpg\",\"contentUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/small-business-cyber-security-feature.jpg\",\"width\":1600,\"height\":1000,\"caption\":\"Feature image for the article on small business cyber security. It has two individuals working at a computer with one gesturing at something specific\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/8-reasons-why-you-need-small-business-cyber-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"8 Reasons Why You Need Small Business Cyber Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\",\"name\":\"Savvy Security\",\"description\":\"Practical cybersecurity advice\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\",\"name\":\"Savvy Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"caption\":\"Savvy Security\"},\"description\":\"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\\\/7 security teams.\",\"sameAs\":[\"blogadmin\"],\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/author\\\/blogadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"8 Reasons Why You Need Small Business Cyber Security","description":"Small business cyber security can't wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/","og_locale":"en_US","og_type":"article","og_title":"8 Reasons Why You Need Small Business Cyber Security","og_description":"Small business cyber security can't wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.","og_url":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/","og_site_name":"Savvy Security","article_publisher":"https:\/\/www.facebook.com\/cheapsslsecurities","article_published_time":"2021-05-18T20:53:00+00:00","article_modified_time":"2021-06-02T16:02:22+00:00","og_image":[{"width":1600,"height":1000,"url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg","type":"image\/jpeg"}],"author":"Savvy Security","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"Savvy Security","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/"},"author":{"name":"Savvy Security","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"headline":"8 Reasons Why You Need Small Business Cyber Security","datePublished":"2021-05-18T20:53:00+00:00","dateModified":"2021-06-02T16:02:22+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/"},"wordCount":3152,"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg","keywords":["featured","small business cyber security"],"articleSection":["SMB Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/","url":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/","name":"8 Reasons Why You Need Small Business Cyber Security","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#primaryimage"},"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg","datePublished":"2021-05-18T20:53:00+00:00","dateModified":"2021-06-02T16:02:22+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"description":"Small business cyber security can't wait. Here are 8 critical reasons why small business cybersecurity should be among your top priorities.","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#primaryimage","url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg","contentUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/small-business-cyber-security-feature.jpg","width":1600,"height":1000,"caption":"Feature image for the article on small business cyber security. It has two individuals working at a computer with one gesturing at something specific"},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/blog\/8-reasons-why-you-need-small-business-cyber-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cheapsslsecurity.com\/blog\/"},{"@type":"ListItem","position":2,"name":"8 Reasons Why You Need Small Business Cyber Security"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/blog\/#website","url":"https:\/\/cheapsslsecurity.com\/blog\/","name":"Savvy Security","description":"Practical cybersecurity advice","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493","name":"Savvy Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","caption":"Savvy Security"},"description":"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\/7 security teams.","sameAs":["blogadmin"],"url":"https:\/\/cheapsslsecurity.com\/blog\/author\/blogadmin\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/6984","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/comments?post=6984"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/6984\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media\/6990"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media?parent=6984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/categories?post=6984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/tags?post=6984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}