Who gets hit?
According to the Microsoft Digital Defense Report 2025, more than 70% of human-operated ransomware attacks targeted organizations with fewer than 1,000 employees. Smaller businesses often have fewer security resources, which makes them easier targets.
It's also about data
Modern attacks aren't just about locking files. Microsoft reports that in around 80% of security incidents, attackers stole data or tried to. That means a good backup alone isn't enough – your data can still end up in the wrong hands.
How to strengthen your defenses
Most attacks start with stolen sign-in credentials or a vulnerable device. Strong sign-in, up-to-date computers, and endpoint protection that detects attacks early stop the vast majority of them. Backups also need to be protected against deletion and tested regularly.
What we recommend
- Require phishing-resistant multi-factor authentication (MFA), especially for administrators
- Make sure every computer has up-to-date endpoint protection
- Test restoring from backup
- Have a plan for what to do if you're attacked
How we can help
Wondering what this means for your organization? Let's talk.
Request a meeting →