A cyber breach does not end when the systems come back online. For a company with
25 employees or fewer, the monetary impact can decide whether the business
continues. Downtime, ransom payments, lost production, and secondary effects such as
employee turnover compound quickly.
This excerpt from the Orange Hat Tech Summit examines those costs in practical
terms. Speakers discuss an agricultural-parts manufacturer that paid $40,000 in ransom
and remained down for three weeks. The lost business during that period can reach
hundreds of thousands of dollars, and the inability to make payroll can force people out
of jobs. A half-million-dollar hit on a firm of that size is described as door-closing.
Published averages vary because the definition of a small business differs across
studies. Figures near $4 million may reflect organizations with far more than 25
employees. Consistent reporting indicates that roughly 60 percent of businesses close
within nine months of a ransomware attack, and half of the survivors close within three
years. Additional losses include rework after data is destroyed, intellectual property
appearing on leak sites, and business email compromise scams that average about
$98,000 per victim. The discussion underscores that recovery depends on preparation
that limits both the initial outage and the long-term financial drag.
Key Takeaways
• A half-million-dollar financial hit can close a company with 25 employees.
• About 60 percent of businesses close within nine months of a ransomware attack.
• Of the businesses that remain open after nine months, half close within three years.
• Three weeks of downtime can produce lost revenue far larger than the ransom payment itself.
• Destroyed data requires rework; intellectual property posted on leak sites can be used by competitors.
• Business email compromise scams average approximately $98,000 per victim.