Real-World Examples of Small Businesses Hit by Cybersecurity Breaches (2022–2025)
Barbara Corcoran’s Real Estate Firm (2022)
- Type: Business Email Compromise (BEC)
- Size: Small team with outsourced bookkeeping
- Incident: A scammer impersonated Corcoran’s assistant via a lookalike email and sent a fake invoice. The bookkeeper wired $380,000 before discovering the fraud.
- Lesson: Even well-known individuals with small operations are vulnerable to social engineering.
St. Margaret’s Health – Rural Hospital Closure (2023)
- Type: Ransomware
- Size: Small rural hospital
- Incident: Ransomware crippled billing and medical records, forcing the hospital to shut down permanently.
- Lesson: Lack of segmented networks and recovery plans can lead to total collapse.
Weee! Grocery Delivery Startup (2023)
- Type: Data Breach
- Size: Small tech startup
- Incident: Exposed customer data, including names, emails, and order history.
- Lesson: Cloud misconfigurations and rapid scaling without security controls can lead to breaches.
Young Consulting (Connexure) – IT Services Firm (2024)
- Type: Ransomware
- Size: Boutique IT consultancy
- Incident: Attack encrypted client files and disrupted services for weeks.
- Lesson: MSPs and IT firms are prime targets due to access to client systems.
Goglia Nutrition / FuturHealth (2024)
- Type: Data Breach
- Size: Small wellness company
- Incident: Health and nutrition data compromised; scope undisclosed.
- Lesson: Even niche health businesses must comply with HIPAA and secure client data.
Key Statistics on Small Business Cyber Risk
- 46% of all breaches affect businesses with fewer than 1,000 employees
- 37% of ransomware victims have fewer than 100 employees
- 95% of incidents cost between $826 and $653,00, enough to bankrupt many small firms
- 51% of small businesses pay ransom when attacked
Why This Matters
- Small businesses are not invisible; they’re often seen as soft targets.
- Human error and lack of layered defenses are common vulnerabilities.
- Cybersecurity is essential, not just for protection, but for survival.
Sources:
Strongdm.com
michigansbdc.org