Small Business, Big Target: The Impact of Ransomware

In today’s AI driven landscape, cyber-attacks are now more efficient than ever. Attacks are deployed at scale, impacting more businesses than ever before. Ransomware is a specific, targeted attack, that usually comes in the form of phishing or malware, but what is it really, and how will it impact your business?

What is Ransomware?

When a Ransomware attack is deployed, an organization loses access to company tools and data and is forced to pay the attackers a monetary amount in order to restore access. Whether that be non-public customer information, employee information or operational workflows, banking information, a specific workstation or server, or the tools that power your day-to-day activities. During a Ransomware attack, companies face not only tremendous ransoms that can cost hundreds of thousands, if not millions of dollars, but lengthy downtime leading to loss of revenue – if recovery is even an option.

According to the FBI’s Internet Crime division (IC3), Ransomware losses in the US reached $1.57 Billion (capital B) in 2025. Additionally, the Department of Justice estimates that only 20% of cybercrime is reported, so the actual impact is thought to be much higher.

Who are the Targets?

When cyber-attacks make the news, it’s usually because a large-scale corporation was breached, such as the Stryker attack that occurred earlier this year (20,000 employee devices wiped). However, Small Businesses are the primary target for cybercrime, because malicious actors know that SMBs do not have the infrastructure in place to mitigate or remediate an attack. Ransomware is the most impactful and most common cyber-attack a business might experience.

What is the impact?

• A University of Hawaii study notes that Ransomware is involved in 88% of attacks affecting small businesses.
• The average Ransomware attack will cost a small business $120,000 to $1,200,000, with an average of $250,000 per incident.
• Ransomware will take a company an average of 21 days to restore operations across the organization.
• The National Cyber Security Alliance states that 60% of small businesses close following a Ransomware attack

How Can You Improve Security?

1. Multi-Factor Authentication (MFA)

Multifactor Authentication helps to secure employee accounts by requiring authentication on more than one device when signing in. This makes it tough for attackers to jailbreak their way into accounts.

2. Employee Awareness

Know the basics of spotting an odd email, and the risks that can be associated with unknown applications and websites. One accidental click is all it takes to install something that could have serious repercussions.

3. Reliable Backups

Ensure to take and test regular backups. If you recover from a backup or restore point, malicious actors won’t be able to force you to pay their ransom.

4. Device and Account Control Policies

Work with an IT provider to manage device and account policies and restrict who can access corporate information and workstations. Give employees only the tools they need and restrict privileged access to minimize your attack surface.

5. Leverage EDR/AV

Endpoint Detection and Response allows you to quarantine attacks or compromised devices before a Ransomware can spread throughout the team or Network. Antivirus scans files when downloaded, to ensure there’s no malicious code included in them. A combination of the two helps build a robust defense.

What We Provide at Microsec IT

To secure your environment, we leverage a multitude of tools to secure user accounts and devices, including BYOD and mobile device scenarios. A few tools we provide include:

• Backup and Disaster Recovery / BDR
• Advanced Email Threat Protection
• Microsoft 365 and Google Workspace Hardening
• Security Awareness Training and Best Practices Workshops
• 24/7 Advanced Security Monitoring and Alerting
• Centralized Device, Access, and Application Management

Our mission is to provide enterprise-level cybersecurity services to all of our clients, regardless of their size. We take a holistic, tailored approach to developing a unique solution for your environment, so that you’re truly getting a one-of-a-kind security service in a budget that fits your goals and supports your business.

Proudly serving Washington and Oregon, please don’t hesitate to reach out to our team at info@microsecit.com for any questions, consultations, or support we can provide!