Small business hacks do not make headlines. They're not known nationally. They don’t affect 1 billion users. But they are big targets for hackers. And in today's world, small business owners are learning about how to stay secure as their employees work virtually.
According to smallbiztrends.com, 43 percent of cyber-attacks are against small businesses, and 60 percent go out of business within six months of a cyber-attack. These numbers will grow this year, particularly due to the efforts from phishing campaigns and ransomware.
It's estimated that ransomware is a billion dollar industry, and growing. If you’re not familiar with ransomware, that’s because you haven’t been hit with it…yet. Ransomware is malware that is downloaded onto your computer and encrypts your files. When you try to access that information, you find a ransom note instead requesting payment in bitcoin, a form of digital currency. If you pay the ransom, the decryption key will be sent to you and you (hopefully) will get your files back. Without data back-ups or cyber extortion insurance, you will be forced to make the decision to pay the ransom or spend hours recreating the data.
There's a reason why this billion dollar industry is growing. Ransomware has gotten more sophisticated. Some ransomware can act as a distraction while additional malware is installed. This additional malware can record key strokes – such as user names and passwords. Once your credentials are stolen, the possibilities are endless regarding what hackers have access to. And because this has become such a lucrative business for these thieves, new amateur hackers are popping up everyday.
If you aspire to become a hacker, and are not sure where to begin, you can start with “ransomware for hire.” Similar to you and I hiring a plumber or landscaper, new hackers can hire someone to build the ransomware for them. They then execute the attacks via email phishing campaigns. Small businesses are a popular target for phishing campaigns because they lack the necessary security measures that big businesses have, including security training of their employees.
Employees are rapidly becoming small business’ biggest security vulnerability, when they should be their biggest defense. If you’re not sure where to get started, it may be time to look for cyber insurance. It is so important to obtain options. Not all cyber insurance is created equal, especially is such a rapidly growing area. You should look for coverage for cyber extortion, business interruption, data breach expenses that include forensics, credit monitoring, public relations, and more. Does your quote include coverage for regulatory action, fines and penalties? What about Payment Card Industry fines and penalties? In addition to assisting with ransomware attacks, forensics for malware, compensation for lost business resulting from a hack, etc., most cyber carriers can also provide risk management services – including policies to implement and improved training for your employees.
Contact your trusted CH Insurance advisor today to help you navigate through the world of cyber insurance.