Report by VikingCloud

2025 SMB Threat Landscape Report

35 FINDINGSPublished Mar 25, 2025
View Original Report →

Key Findings

Wi-Fi or network disruptions (52%) were the most common cyber disruptions faced by SMBs in the past 12 months.

SMBNetwork disruptionWiFi disruption

SMBs are twice as likely to be unaware they’ve been breached by more sophisticated attacks, like a deepfake, compared with more common threats like network downtime.

SMBBreachDeepfakes

16% of SMBs never back up their data.

SMBBackups

Phishing texts and emails (48%) were a common cyber disruption faced by SMBs in the past 12 months.

SMBPhishing

49% of SMBs believe AI will be most useful in offering real-time threat response recommendations.

SMBAIThreat response

50% of SMB tech stacks include antivirus software.

SMBSecurity toolsAntivirusAV

32% of SMBs lack the budget to hire more cyber staff.

SMBBudgetStaff

24% of SMBs were targeted by malware in the past 12 months.

SMBMalware

55% of SMBs believe AI will be most useful in identifying threats before they impact business operations.

SMBCybersecurityAIThreats

A successful cyberattack would force nearly 1 in 5 SMBs to close.

SMBCyber attackClosure

49% of SMBs believe AI will be most useful in flagging phishing emails and texts.

SMBPhishingAI

23% of SMBs use easily hackable passwords with a pet’s name, a series of numbers, or a family member’s name.

SMBPasswordsCredentials

For nearly a third of SMBs, a cyberattack with minimal financial impact – less than $10,000 – would cause them to shut down.

SMBCyber attack

The risk of business downtime (55%) from cyberattacks is a concern for SMB owners.

SMBDowntimeCyber attackCyber attack consequences

22% of SMBs have deployed dark web monitoring.

SMBSecurity toolsDark web monitoring

19% of SMBs experienced deepfake attacks in the past 12 months.

SMBDeepfake

Over half of SMB owners (52%) see cybersecurity as a revenue booster

SMBCybersecurityRevenue booster

Fake social media accounts or website domains (32%) were a common cyber disruption faced by SMBs in the past 12 months.

SMBSocial media accountsWebsite domains

18% of SMBs have deployed penetration testing.

SMBPen testingPenetration testing

14% of SMBs experienced ransomware attacks in the past 12 months.

SMBRansomware

47% of SMB tech stacks include network scanning.

SMBSecurity toolsNetwork scanning

19% of SMBs experienced denial of service attacks in the past 12 months.

SMBDoS

60% of SMBs recognise they’re the most likely target for cybercriminals.

SMB

74% of SMBs are self-managing cybersecurity or relying on untrained family members or friends.

SMBSelf-managed cybersecurity

33% of SMBs have outdated cyber technology.

SMBSecurity tools

14% of SMBs don’t require multi-factor authentication.

SMBMFA

Cybersecurity (48%) has emerged as the second highest business concern for SMBs.

SMBCybersecurity

29% of SMBs have deployed endpoint security.

SMBSecurity toolsEndpoint security

Loss of customers (36%) from cyberattacks is a concern for SMB owners.

SMBCyber attackLoss of customersCyber attack consequences

80% of SMBs recognise they have cyber vulnerabilities.

SMBVulnerabilities

Only 15% of SMBs hired an internal IT person or outsourced to a Managed Security Service Provider (MSSP).

SMBStaffMSSP

44% of SMB tech stacks include firewalls.

SMBSecurity toolsFirewalls

20% of SMBs have no access to cyber technology at all.

SMBSecurity tools

Lower sales (22%) from cyberattacks is a concern for SMB owners.

SMBCyber attackCyber attack consequences

65% of SMBs report cybersecurity as the #1 business function that could be managed more effectively with artificial intelligence (AI).

SMBCybersecurityAI