Half of all Ransomware Attacks This Year Targeted Small Businesses

New data shows just how crippling ransomware has been on small businesses that have fallen victim to an attack and needed to pay the ransom.

Logic would normally dictate that ransomware gangs are going to go after the “big fishes” – the larger organizations with deep pockets.

But with the advent of the “as a service” model of ransomware, threat actors have found a niche, with many of them focusing on businesses with 1 to 50 employees.

According to Hornet Security’s Q3 2024 Ransomware Attacks Survey report, almost 56% of all the ransomware attacks impacted the small business. And small businesses aren’t prepared, as 1 in 5 paid the ransom to recover their data – that’s 22% higher than the average.

And what makes it even worse is the fact that 60% of the small business victims paid ransom amounts ranging between $10,000 and $100,000 – an extremely material amount of money for businesses with less than 50 employees.

So, if you’re in charge of cybersecurity at a small business, let’s run the numbers and figure out your odds based on the Hornet data.

You basically have a 1 in 8 chance of both being hit by ransomware and having to pay a hefty ransom. So, it makes sense that you need to invest in security awareness training to thwart off phishing attacks (the primary ransomware attack vector, according to Hornet’s data) and to keep the organization secure.

KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.

---

BreachSim

Free downloadable software tool

How easy is it for bad actors to penetrate your system and exfiltrate your data? Pinpoint vulnerabilities, take action and build stronger cyber defenses with BreachSim, a free downloadable software tool from KnowBe4. Based on techniques outlined in the MITRE Att&CK framework, BreachSim launches 12+ data exfiltration scenarios to uncover the stark reality of what happens when employees unknowingly fall for an attack.

How BreachSim works:

• 100% harmless simulation of real breach and data exfiltration attacks
• Provides secure .txt, .doc, and .bmp test files for the simulation
• Tests 12+ realistic data exfiltration scenarios following the MITRE Att&CK framework
• Just download the installer, upload the secure test files, and run

Results in a few minutes!

PS: Don’t like to click on redirected buttons? Cut and paste this link in your browser: https://info.knowbe4.com/breached-password-test-partner?partnerid=001a000001lWEoJAAW