While major breaches against large, well-known companies continue to dominate media headlines, the reality is that small and midsize businesses are much more common targets of most cyber attacks, Chubb has found.
In fact, according to Chubb's claims data, 60 percent of all cyber events experienced by small and midsize businesses in the past three years were caused by external factors – events that are a result of individuals or organizations where the impacted company had no relationship. Nonetheless, many small and midsize businesses continue to believe they are not at risk of cyber attacks.
Chubb has released an advisory to address that knowledge gap, which often leads to many small and midsize businesses underestimating the substantial cyber-related risks they face. The advisory, “Cyber Attack Inevitability: The Threat Small & Midsize Businesses Cannot Ignore,“ highlights these cyber risks, offers real-world examples that demonstrate what small and midsize businesses often face, and shares precautionary measures to help protect against these occurrences.
For example, Chubb pointed out, if something as simple as email account information falls into the hands of a cyber criminal, a business client may be duped to wire transfer large sums of money into a fraudulent bank account, which, if successful, could place the business on the hook for those hundreds of thousands of dollars.
“Small and midsize businesses are directly in the crosshairs of cyber criminals in the United States and across the world,” said William Stewart, division president of Chubb's global cyber practice. “These businesses often assume they are not targets for cyber criminals, due to their size, industry, or lack of large databases of personal information. However, the reality is quite the opposite: smaller businesses are actually more vulnerable and considered prime targets for cyber criminals, as their security measures are more likely to be outdated or underprioritized, opening the door for cyber criminals to deploy attacks quickly, cheaply, and anonymously.”
According to Juniper Research, the total number of connected Internet of Things (“IoT”) sensors and devices is set to exceed 50 billion by 2022, up from an estimated 21 billion in 2018. “That translates into an incredible number of entry points for cyber criminals,” Mr. Stewart added. “If companies are going to be able to operate moving forward, cyber security must be a central focus of management teams.
“Cyber incidents can be costly and even disastrous for a small business. On average, it costs about $400,000 to recover from a single cyber incident, with more than 4,000 incidents occurring every single day,” Mr. Stewart noted. “The cost and frequency of these attacks highlight the importance of the issue at hand. However, despite these daunting statistics, the majority of cyber incidents are preventable, as they mostly stem from human error or a simple lack of proper training.”
Learn more: www.chubb.com/cyber.