We've all heard the story: A major company scrambling to right the ship after a security breach. In the wake of regular large-scale data breaches, formal apologies and widespread password resets are becoming the norm. With even the big players falling prey to cyberthreats, where does that leave today's small businesses (SMBs)?
\r\nThere are 28 million small businesses in the U.S., and approximately 90 percent don't have specific systems and processes in place to protect customer and company data. Unsurprisingly, this makes SMBs incredibly popular targets for cyberattacks, and these attacks cause 60 percent of affected SMBs to go out of business within six months. Not only can a cyberthreat cause serious financial harm – the average small business with a compromised bank account loses $32,000 – but a breach can permanently damage a company's reputation.
\r\nOctober was National Cybersecurity Awareness Month, which makes now a good time for your business to think about its security systems and strategies. Taking cyberthreats seriously means understanding how your business assets are likely to be targeted and putting systems in place to detect a breach as soon as it happens. Reacting quickly and effectively to limit the impact is key.
\r\nYou've almost certainly received a phishing email: If you were lucky, you recognized it as something suspicious and deleted it. How do these annoying and dangerous inbox infiltrators work? Essentially, phishing emails masquerade as legitimate correspondence to get you to divulge personal information. Most often, these emails direct you to a fake website or ask you to download a file.
\r\nPhishing emails are among the most common ways attackers find entry to your company's systems. More than 90 percent of cyberattacks worldwide originate from these types of emails. And the practice is picking up steam: Instances of phishing rose 46 percent between the end of 2017 and the second quarter of 2018.
\r\nOther cyberthreats to be aware of are malware and ransomware. Malware is any malicious software written to harm, while ransomware is a type of malware that goes a step further by taking over your computer systems and denying access to data. As its name suggests, ransomware effectively holds your resources hostage. The cyberattackers usually say you can get your data back – at a price, which is often paid in cryptocurrency or by credit card – but this \"agreement\" is not always honored, and there's little you can do if data isn't handed back. Ransomware is most often delivered as a phishing email attachment, making these fake correspondences particularly hazardous.
\r\nThe third threat to SMBs is a data breach through hacking. This is the directed attack where hackers make their way into a secure network by circumventing security. They sometimes break into systems using complex tactics like you've seen in the movies, but more often than not, they get in by using existing usernames and passwords. Because so many people reuse passwords or employ incredibly simple ones, hackers stroll in right through the digital front door. For this reason, it's important to educate both employees and customers about optimal login habits and the importance of complex passwords.
\r\nWhile this can all sound like science fiction, malware is booming: In the first quarter of 2018, 1.9 million new mobile malware threats were detected. The good news is that security for your business is achievable. Here are four steps you should take.
\r\n\r\n\r\n1. Designate a cybersecurity point person and empower them to implement solutions from a trusted security partner. Even if you don't have a dedicated IT person on staff, it's important to appoint someone within the company who is knowledgeable about cybersecurity. Without a point person, it's too easy for this crucial consideration to be overlooked.
\r\nLeverage the power of best-in-class cybersecurity solutions, like those offered by McAfee, to protect your data. In companies without effective security measures, threats remain in the system for almost a year, on average, before they are detected.
\r\n2. Establish a security perimeter around your crucial systems via multifactor authentication. Data should be password-protected, and an additional form of authentication is also advisable. A one-time PIN, like the code that many popular social media sites send to your phone when you log on from a new device, is a good example. There are plenty of identity access management companies out there that provide simple and affordable solutions.
\r\n3. Provide training to employees about how to recognize suspicious emails and phishing attacks. Hackers are becoming more creative, and the differences between legitimate and phishing emails are often subtle.
\r\n4. Regularly back up your network. Once you've confirmed your system is healthy and you've established your security solutions and protocols, perform regular backups. Before downloading any files, make sure they are scanned for safety.
\r\n
By doing the above, the likelihood of a breach is minimized, but it can still happen. It's almost impossible, for example, to protect yourself completely against an employee who decides to go rogue and copy data. How you respond to a threat could decide the fate of your business.
\r\nWhat should you do? In the immediate, stay calm, and look to the protocols you previously established. These procedures were designed to limit damage and provide a quick response. Check on your last reliable backup and make sure it remains secure. Contact your security partner immediately and ask their help in responding to the threat.
\r\nIf customer data has been compromised, informing them of the breach is your next step. Let customers know exactly what your company is doing to resolve the issue and don't beat around the bush.
\r\nWhatever concern your customers express when learning of the threat, it's preferable to the organizational shame of hiding a breach and having it uncovered later. Give customers information about how they can protect their data going forward and how your company plans to do this better in the future.
\r\nWhile no one can guarantee your company won't suffer a cyberattack, putting the right security measures in place can get your small business as close as possible to complete safety.
\r\nHaving the right cybersecurity measures in place can make all the difference when it comes to protecting your small business. Learn how Dell's security solutions can prepare your business to face any threat.
\n","docType":"article","guid":"articles_ff74ae4bbc149c49d6b3e27fa7baf518","lastModified":"2018-11-14T15:30:00.000Z","published":"2018-11-14T15:30:00.000Z","structuredData":null,"subtitle":"Learn how to protect your SMB from the three biggest cybersecurity threats.","template":"legacy","title":"Hackers Are Targeting Small Businesses. Here's How to Protect Yourself","type":"article","author":{"avatar":"https://staging.business.com/images/author/59e/4ab4651ee47d81a8b458b/100-100","bio":"Erik Day is Vice President & General Manager, North America Small Business at Dell Technologies.\r\nHe has been at Dell for 18 years. During this tenure, Erik has held multiple sales, merchandising, operations and marketing leadership roles both domestically and internationally. Erik’s goal is to advocate for small business across the US and Canada and ensure they are receiving the IT necessary to help their businesses grow and thrive. He believes that Small Business is the growth engine of the global economy and that technology will help them achieve their goals.","name":"Erik Day","image":null,"slug":null,"social":{"facebook":"","linkedin":"","twitter":"https://twitter.com/erik_m_day","website":"http://www.dell.com/"},"status":"enabled","title":null,"type":"Old BDC Member","user":{"imagePath":"https://staging.business.com/images/undefined","profile":{"company":"FOOTWRIGHT ENTERPRISE","jobTitle":"CEO","website":""}}},"breadcrumbs":null,"channels":{"primary":{"name":"Business Basics","slug":"business-basics"},"sub":{"name":"Entrepreneurship","slug":"entrepreneurship"}},"meta":{"robots":"index, follow","description":"Approximately 90 percent of small businesses don't have systems or processes in place to protect customer and company data. Learn how to protect your SMB.","title":"How to Protect Your SMB from Hackers - business.com"},"parsedContent":{"toc":[{"id":"the-biggest-cybersecurity-threats","title":"The biggest cybersecurity threats"},{"id":"protecting-your-small-business","title":"Protecting your small business"},{"id":"in-the-event-of-a-breach","title":"In the event of a breach"}],"json":[{"component":"p","children":["We've all heard the story: A major company scrambling to right the ship after a security breach. In the wake of regular large-scale data breaches, formal apologies and widespread password resets are becoming the norm. With even the big players falling prey to cyberthreats, where does that leave today's small businesses (SMBs)? "]},{"component":"p","children":["There are 28 million small businesses in the U.S., and approximately 90 percent don't have specific systems and processes in place to protect customer and company data. Unsurprisingly, this makes SMBs incredibly popular targets for cyberattacks, and these attacks cause 60 percent of affected SMBs to go out of business within six months. Not only can a cyberthreat cause serious financial harm – the average small business with a compromised bank account loses $32,000 – but a breach can permanently damage a company's reputation. "]},{"component":"p","children":["October was National Cybersecurity Awareness Month, which makes now a good time for your business to think about its security systems and strategies. Taking cyberthreats seriously means understanding how your business assets are likely to be targeted and putting systems in place to detect a breach as soon as it happens. Reacting quickly and effectively to limit the impact is key."]},{"component":"h2","props":{"id":"the-biggest-cybersecurity-threats"},"children":["The biggest cybersecurity threats"]},{"component":"p","children":["You've almost certainly received a phishing email: If you were lucky, you recognized it as something suspicious and deleted it. How do these annoying and dangerous inbox infiltrators work? Essentially, phishing emails masquerade as legitimate correspondence to get you to divulge personal information. Most often, these emails direct you to a fake website or ask you to download a file. "]},{"component":"p","children":["Phishing emails are among the most common ways attackers find entry to your company's systems. More than 90 percent of cyberattacks worldwide originate from these types of emails. And the practice is picking up steam: Instances of phishing rose 46 percent between the end of 2017 and the second quarter of 2018. "]},{"component":"p","children":["Other cyberthreats to be aware of are malware and ransomware. Malware is any malicious software written to harm, while ransomware is a type of malware that goes a step further by taking over your computer systems and denying access to data. As its name suggests, ransomware effectively holds your resources hostage. The cyberattackers usually say you can get your data back – at a price, which is often paid in cryptocurrency or by credit card – but this \"agreement\" is not always honored, and there's little you can do if data isn't handed back. Ransomware is most often delivered as a phishing email attachment, making these fake correspondences particularly hazardous. "]},{"component":"p","children":["The third threat to SMBs is a data breach through hacking. This is the directed attack where hackers make their way into a secure network by circumventing security. They sometimes break into systems using complex tactics like you've seen in the movies, but more often than not, they get in by using existing usernames and passwords. Because so many people reuse passwords or employ incredibly simple ones, hackers stroll in right through the digital front door. For this reason, it's important to educate both employees and customers about optimal login habits and the importance of complex passwords. "]},{"component":"h2","props":{"id":"protecting-your-small-business"},"children":["Protecting your small business"]},{"component":"p","children":["While this can all sound like science fiction, malware is booming: In the first quarter of 2018, 1.9 million new mobile malware threats were detected. The good news is that security for your business is achievable. Here are four steps you should take. "]},{"component":"blockquote","children":[{"component":"p","children":["1. ",{"component":"em","children":["Designate a cybersecurity point person and empower them to implement solutions from a trusted ",{"component":"a","props":{"href":"http://www.dell.ca/en-us/work/learn/software-security-data-security","target":"_blank","rel":"noopener external nofollow"},"children":["security partner"]},"."]}," Even if you don't have a dedicated IT person on staff, it's important to appoint someone within the company who is knowledgeable about cybersecurity. Without a point person, it's too easy for this crucial consideration to be overlooked. "]},{"component":"p","children":["Leverage the power of best-in-class cybersecurity solutions, like those offered by ",{"component":"a","props":{"href":"https://www.mcafee.com/enterprise/en-us/products.html","target":"_blank","rel":"noopener external nofollow"},"children":["McAfee"]},", to protect your data. In companies without effective security measures, threats remain in the system for almost a year, on average, before they are detected. "]},{"component":"p","children":["2. ",{"component":"em","children":["Establish a security perimeter around your crucial systems via multifactor authentication."]}," Data should be password-protected, and an additional form of authentication is also advisable. A one-time PIN, like the code that many popular social media sites send to your phone when you log on from a new device, is a good example. There are plenty of identity access management companies out there that provide simple and affordable solutions. "]},{"component":"p","children":["3. ",{"component":"em","children":["Provide training to employees about how to recognize suspicious emails and phishing attacks."]}," Hackers are becoming more creative, and the differences between legitimate and phishing emails are often subtle. "]},{"component":"p","children":["4. ",{"component":"em","children":["Regularly back up your network."]}," Once you've confirmed your system is healthy and you've established your security solutions and protocols, perform regular backups. Before downloading any files, make sure they are scanned for safety."]}]},{"component":"h2","props":{"id":"in-the-event-of-a-breach"},"children":["In the event of a breach"]},{"component":"p","children":["By doing the above, the likelihood of a breach is minimized, but it can still happen. It's almost impossible, for example, to protect yourself completely against an employee who decides to go rogue and copy data. How you respond to a threat could decide the fate of your business. "]},{"component":"p","children":["What should you do? In the immediate, stay calm, and look to the protocols you previously established. These procedures were designed to limit damage and provide a quick response. Check on your last reliable backup and make sure it remains secure. Contact your security partner immediately and ask their help in responding to the threat. "]},{"component":"p","children":["If customer data has been compromised, informing them of the breach is your next step. Let customers know exactly what your company is doing to resolve the issue and don't beat around the bush. "]},{"component":"p","children":["Whatever concern your customers express when learning of the threat, it's preferable to the organizational shame of hiding a breach and having it uncovered later. Give customers information about how they can protect their data going forward and how your company plans to do this better in the future. "]},{"component":"p","children":["While no one can guarantee your company won't suffer a cyberattack, putting the right security measures in place can get your small business as close as possible to complete safety. "]},{"component":"p","children":[{"component":"i","children":["Having the right cybersecurity measures in place can make all the difference when it comes to protecting your small business. Learn how "]},{"component":"a","props":{"href":"https://datasecurity.dell.com/","target":"_blank","rel":"noopener external nofollow"},"children":[{"component":"i","children":["Dell's security solutions"]}]},{"component":"i","children":[" can prepare your business to face any threat."]}]}]},"resource":null,"sponsorship":null,"thumbnail":{"path":"https://staging.business.com/images/content/5be/3469d5a215e35648b4567/1500-0-","caption":"deepadesigns/Shutterstock","isBlurred":true},"bestPicks":null},"related":{"relatedArticles":[{"title":"Malware on Job Post Sites: What Businesses Need to Know Before Opening a Resume Attachment","canonical":"https://staging.business.com/articles/malware-on-job-post-sites-what-businesses-need-to-know-before-opening-a-resume-attachment/","slug":"malware-on-job-post-sites-what-businesses-need-to-know-before-opening-a-resume-attachment","thumbnail":"https://staging.business.com/images/content/55f/c5a543187b1f96d8b462f/1500-0-","dek":"Don't fall for this new malware scheme by bogus job seekers. How to protect your company from this and other online schemes.","lastModified":"2015-09-18T20:00:00Z","published":"2015-09-18T20:00:00Z","sponsored":null},{"title":"How to Do a Cybersecurity Risk Assessment","canonical":"https://www.business.com/articles/cybersecurity-risk-assessment/","slug":"cybersecurity-risk-assessment","thumbnail":"https://www.business.com/images/content/5d2/2b53d5a215efd708b457a/1500-0-","dek":"Learn how to find the vulnerabilities and risks in your network before hackers do.","lastModified":"2019-08-09T13:30:00Z","published":"2019-08-09T13:30:00Z","sponsored":false},{"title":"How to Assess the Cybersecurity Risk of Your Small Business","canonical":"https://www.business.com/articles/assess-small-business-cybersecurity/","slug":"assess-small-business-cybersecurity","thumbnail":"https://www.business.com/images/content/5ed/118db7b437422298b4576/1500-0-","dek":"Security risk profiles can help quantify cybersecurity risk.","lastModified":"2020-06-03T13:41:00Z","published":"2018-06-15T13:30:00Z","sponsored":false},{"title":"Shark in the Water: Protecting Your Business From Phishing","canonical":"https://staging.business.com/articles/protecting-your-business-from-phishing-and-malware/","slug":"protecting-your-business-from-phishing-and-malware","thumbnail":"https://staging.business.com/images/content/556/ca2893187b109338b4592/1500-0-","dek":"Email has become the primary method of communication for many businesses—and phishers know this. Intermedia's CTO shares protection tips.","lastModified":"2015-06-03T16:00:00Z","published":"2015-06-03T16:00:00Z","sponsored":null},{"title":"SMEs and Cybersecurity Challenges: A Wakeup Call","canonical":"https://www.business.com/articles/small-business-cybersecurity-myths-and-challenges/","slug":"small-business-cybersecurity-myths-and-challenges","thumbnail":"https://www.business.com/images/content/5ab/3dc3a51ee47aa3f8b45a6/1500-0-","dek":"When it comes to cyber attacks, organizations of all sizes remain at risk.","lastModified":"2018-03-22T16:55:00Z","published":"2018-03-22T16:55:00Z","sponsored":false},{"title":"Amazon Hack Has Customers Hacked Off: Defending Your Customer Service From Phishing","canonical":"https://staging.business.com/articles/amazon-hack-has-customers-hacked-off-defending-your-customer-service-from-phishing/","slug":"amazon-hack-has-customers-hacked-off-defending-your-customer-service-from-phishing","thumbnail":"https://staging.business.com/images/content/56c/4ddaf2f87b13d48814c82/1500-0-","dek":"Phishers can steal confidential customer information by spoofing chat reps. Protect your customer service agents from taking the bait.","lastModified":"2016-02-18T19:00:00Z","published":"2016-02-18T19:00:00Z","sponsored":null},{"title":"How to Protect Your Web Application – Even If You Don't Own Sensitive Data","canonical":"https://www.business.com/articles/protecting-web-applications/","slug":"protecting-web-applications","thumbnail":"https://www.business.com/images/content/5b5/204c251ee47ed578b4568/1500-0-","dek":"Keep you web application and customer data secure by following these 4 steps.","lastModified":"2018-07-20T07:00:00Z","published":"2018-07-20T07:00:00Z","sponsored":false},{"title":"The Security Risks in Social Media: Interview with Joseph Steinberg","canonical":"https://staging.business.com/articles/interview-with-joseph-steinberg-the-security-risks-in-social-media/","slug":"interview-with-joseph-steinberg-the-security-risks-in-social-media","thumbnail":"https://staging.business.com/images/content/567/ac9d92f87b13e0741fd73/1500-0-","dek":"Social media has become a leading marketing channel with businesses giving it more attention every year. Stay safe with these tips!","lastModified":"2017-02-22T23:59:33Z","published":"2016-01-05T19:00:00Z","sponsored":null},{"title":"The Security Risks in Social Media: Interview with Joseph Steinberg","canonical":"https://www.business.com/articles/interview-with-joseph-steinberg-the-security-risks-in-social-media/","slug":"interview-with-joseph-steinberg-the-security-risks-in-social-media","thumbnail":"https://www.business.com/images/channel/technology.jpg","dek":"Cybersecurity Expert Shares How to Minimize Risks Related to Social Media","lastModified":"2016-01-05T19:00:00Z","published":"2016-01-05T19:00:00Z","sponsored":false},{"title":"Prevent Your Employees From Falling Prey to These Common Holiday Online Scams","canonical":"https://www.business.com/articles/common-holiday-cybersecurity-scams/","slug":"common-holiday-cybersecurity-scams","thumbnail":"https://www.business.com/images/content/5c0/fecbd7b4374a3748b456b/1500-0-","dek":"'Tis the season, unfortunately, for online scams that pose a threat to your cybersecurity.","lastModified":"2018-12-11T22:00:00Z","published":"2018-12-11T22:00:00Z","sponsored":false},{"title":"Under Cyber-Attack: Steps to a More Secure Small Business","canonical":"https://staging.business.com/articles/under-cyber-attack-steps-to-a-more-secure-small-business/","slug":"under-cyber-attack-steps-to-a-more-secure-small-business","thumbnail":"https://staging.business.com/images/content/53e/91b55c9786bdec767acf4/1500-0-","dek":"With the right security software, systems and strategy in place, you can reduce the risks your business could be susceptible to from...","lastModified":"2013-06-20T12:00:02Z","published":"2013-06-20T12:00:02Z","sponsored":null},{"title":"Follow These Steps to Protect Your Company from Phishing Attacks","canonical":"https://staging.business.com/articles/follow-these-steps-to-protect-your-company-from-phishing-attacks/","slug":"follow-these-steps-to-protect-your-company-from-phishing-attacks","thumbnail":"https://staging.business.com/images/content/55f/755103087b17a758b45b5/1500-0-","dek":"There is a simple way reduce the risk of phishing attacks, and it starts with your employees. Educate them before it's too late.","lastModified":"2015-09-16T15:00:00Z","published":"2015-09-16T15:00:00Z","sponsored":null}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5db752e25a215e277d8b4588/Invoicing_AndreyPopov_BDC.png","canonical":"https://staging.business.com/categories/best-collections-agency-services/","title":"The Best Collection Agency Services of 2021","dek":"We've reviewed the best collection agency services for 2021. See up-to-date comparisons on features and the best prices for the top-rated agencies.","slug":"best-collections-agency-services","lastModified":"2021-03-17T16:34:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e4edd837b437442548b456d/cash_Dutko_getty.jpg","canonical":"https://staging.business.com/categories/small-business-loans-and-financing-options/","title":"The Best Business Loan and Financing Options of 2021","dek":"Many small businesses need funding to get started. Learn about the different financing options to decide which would work best for your small business.","slug":"small-business-loans-and-financing-options","lastModified":"2021-03-11T17:24:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5d4c65367b43741a258b4572/Laptop_Sfio_Cracho.png","canonical":"https://staging.business.com/categories/crm-software/","title":"The Best CRM Software of 2021","dek":"Looking for the best CRM software? We have easy-to-read, expert unbiased reviews and feature comparisons of the best and cheapest programs.","slug":"crm-software","lastModified":"2021-02-24T14:09:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2018-11-14T15:30:00.000Z","template":"legacy","title":"Hackers Are Targeting Small Businesses. Here's How to Protect Yourself","meta":{"robots":"index, follow"},"docType":"articles","slug":"hackers-targeting-smbs","canonical":"https://staging.business.com/articles/hackers-targeting-smbs/","skipTOC":false}},"staticQueryHashes":[]}