Islamabad (GNP): A new global survey by Kaspersky covering small- and medium-sized businesses (SMBs) reveals that an overwhelming 86% of respondents worldwide reported experiencing at least one cyber incident within the past year. Phishing attacks, exploits targeting software and web applications, widespread malware, ransomware, unauthorized remote access, and attacks aimed at AI vulnerabilities were identified as the most damaging threats.
Financial losses ranked among the top consequences of the most serious incidents, reported by 22% of those surveyed. Other significant effects included theft of customer information, temporary outages of client-facing platforms such as websites and online stores, loss of control over IT systems, and broader disruptions to business operations.
Beyond financial damage, survey participants noted that attackers primarily focused on stealing data. The most commonly targeted categories included customer data (32%), sensitive internal records such as financial and legal documents (28%), employee login credentials (25%), and company business strategies (23%) — a pattern suggesting cybercriminals are increasingly prioritizing data that can be sold or exploited for future attacks.
The survey found that IT and IT security teams bear the brunt of cyberattacks, with 50% of the most damaging incidents targeting IT departments and 46% targeting IT security specifically. Accounting and finance departments ranked third, affected in 24% of cases. On average, the most severe incidents compromised three departments simultaneously. Interestingly, SMBs reported a higher rate of attacks via customer service channels (21%) compared to mid-sized (15%) and large enterprises (17%).
In response to recent breaches, companies have ramped up cybersecurity measures spanning processes, personnel, and technology. The leading priority was implementing IT security monitoring tools (24%), followed by tightening third-party compliance standards (23%) and improving credential management (23%). Nearly equal numbers of organizations also focused on rolling out security software across employee devices and investing in specialized training for IT staff (22%).
Ilya Markelov, Head of Unified Platform Product Line at Kaspersky, observed that cyber incidents frequently cause more severe damage to small and medium businesses than major breaches do to large corporations, sometimes threatening the very survival of these resource-limited companies. He noted that given the range and intensity of threats, along with operational limitations and specific growth goals, SMBs need scalable, tailored protection — something Kaspersky’s flagship offering, Kaspersky Next Optimum, is designed to deliver through affordable, flexible security solutions, including customizable add-on modules that let users expand their core protection as needs evolve.
Cyber governance expert Asad Ur Rehman noted that cybersecurity concerns are no longer confined to large corporations. He said Pakistani SMBs face growing exposure since they often manage valuable customer and financial data despite having limited security resources, adding that cybersecurity investment should be viewed not as a mere IT expense but as a vital safeguard for business resilience — protecting customer trust, operational stability, and long-term growth.
To reduce the risk of losses from cyber incidents, Kaspersky advises small and medium businesses to adopt specialized security solutions tailored to their budget, size, and industry needs. For micro-businesses, Kaspersky Small Office Security Premium offers user-friendly endpoint protection against advanced threats like malware and ransomware, along with employee security awareness training.
Businesses requiring more advanced protection against a wider array of threats may benefit from Kaspersky Next Optimum, which provides core defenses to prevent evolving attacks, detect threats early, and enable rapid investigation and response before incidents escalate.
Also read: Ahsan Iqbal Requests Continued UK Backing for Development Initiatives
Additionally, the Kaspersky Automated Security Awareness Platform offers interactive courses and simulated phishing exercises to help employees develop stronger cybersecurity habits.
Sohail Majeed is a Special Correspondent at The Diplomatic Insight. He has twelve plus years of experience in journalism & reporting. He covers International Affairs, Diplomacy, UN, Sports, Climate Change, Economy, Technology, and Health.
