Shields Up: Why SMBs Can’t Rely on Luck Anymore
By Todd Wentz • June 11, 2025
As someone with over 30 years in IT and cybersecurity, I’ve seen firsthand how the “we’re too small to be a target” mindset turns into a costly lesson. In today’s threat landscape, small and medium-sized businesses (SMBs) are on the frontlines—whether they realize it or not. And hope isn’t a strategy.
Shields Up: The New Reality for SMBs in Cybersecurity
Hackers are no longer solely chasing large corporations. SMBs are now prime targets because they often lack the layered defenses and dedicated teams of their enterprise counterparts. According to Veeam’s 2023 Ransomware Trends report, 85% of ransomware attacks hit small businesses.
Consider this: In 2019, a ransomware attack on backup provider PerCSoft crippled over 400 dental offices, freezing access to patient records across the country. In July 2021, the REvil gang launched a supply chain ransomware attack through IT software firm Kaseya, impacting up to 1,500 downstream businesses, many of them small and mid-sized companies using managed service providers.
Even municipal networks aren’t immune. In 2019, the city of Baltimore was hit with RobbinHood ransomware, resulting in a full IT shutdown and recovery costs that exceeded $18 million.
Luck Isn’t Enough: Why SMBs Need Robust Protection
Phishing kits and ransomware-as-a-service tools now sell for under $200 online. Cybercrime has scaled—and it’s automated. Your SMB isn’t flying under the radar; it’s drifting without a shield. For most attackers, it’s not personal. It’s profitable.
To defend their operations, SMBs need a proactive cybersecurity posture that covers both technology and people. This includes:
- Firewall and endpoint protection with audit logging
- Regular security assessments and patch management
- Employee training—because human error is still the #1 breach vector
It’s also time to consider cybersecurity insurance. While it won’t prevent a breach, it can help cover legal fees, notification costs, and data recovery. Think of it as your financial airbag—useless if you wait until after the crash to install it.
Don’t Bet on Luck—Act on Insight
Cyberattacks aren’t a matter of “if”—they’re a matter of “when.” And in a world where threats are relentless and automated, SMBs can’t afford to be unprepared.
🛡️ Ready to put your defenses to the test? Download our Risk Reality Check Worksheet and see how your business stacks up against today’s biggest threats. No jargon, no pressure—just clarity.