A recent study conducted by the Identity Theft Resource Center (ITRC) reveals a concerning scenario for small businesses. The survey, completed in August 2025, highlights how cybersecurity has become a crucial challenge for organizations with fewer than 500 employees, with consequences that directly affect consumers.
According to the ITRC 2025 report, 81% of the 662 small businesses interviewed reported having suffered a security breach, a data breach, or both in the past year. A particularly alarming finding is that over 40% of these cyber incidents were identified as attacks enhanced by artificial intelligence. These advanced attacks represent a new frontier of cyber threats, leveraging AI technologies to make themselves more effective and evade traditional security measures.
The economic impact of these breaches is significant and, unfortunately, not limited to the affected companies. 38% of businesses that suffered attacks reported having increased the prices of their products or services to compensate for the losses incurred. This cost transfer represents a chain effect that ends up weighing on end consumers, making cyber attacks a problem that affects the entire society.
To protect their business, small companies should implement basic security measures such as multi-factor authentication, regular staff training on cyber risks, and constant updating of security systems. It is also essential to develop an incident response plan that allows for prompt reaction in case of a breach. For consumers, it is advisable to regularly check account statements, use complex and different passwords for each service, and pay attention to any unjustified price increases that could signal security problems with suppliers.
- Key points to remember:
- 81% of small businesses experienced security breaches in the past year, with over 40% of attacks enhanced by artificial intelligence.
- Cyber attacks have an economic impact that extends to consumers, with 38% of affected companies increasing prices to compensate for losses.
- Cybersecurity is no longer just a technical issue but a fundamental element of the economic sustainability of small businesses and consumer protection.
Sources:
https://www.prnewswire.com/news-releases/identity-theft-resource-center-2025-business-impact-report-costs-from-cybercrimes-are-being-passed-to-consumers-302621054.html
https://www.arffinancial.com/cybercrime-and-small-businesses-the-2025-itrc-business-impact-report/
https://www.idtheftcenter.org/publication/itrc-2025-business-impact-report/
Source: DataBreaches