Ransomware isn't just a big-company problem — small businesses are frequently targeted precisely because they're assumed to have weaker defences. Here's what it is, and what actually stops it.
Ransomware is malicious software that encrypts your files — making them unreadable — and demands payment for the key to unlock them. It usually gets in through a phishing email, a compromised login, or an unpatched vulnerability, then spreads across connected systems before anyone notices.
Attackers often assume smaller businesses have fewer defences, less capacity to investigate an incident, and more pressure to pay quickly just to get operating again. That combination makes SMEs an efficient target, not an unlikely one.
| Layer | What it stops |
|---|---|
| Email security | The phishing email that started it |
| MFA | A stolen password alone getting someone in |
| Patching | Known vulnerabilities being exploited |
| Endpoint protection | The encryption behaviour itself, once triggered |
| Tested backup | Being forced to pay because there's no other option |
No single layer is enough on its own — the point is that each one covers where another might fail.
Having this plan written down before an incident — not improvised during one — is what separates a fast recovery from a chaotic one. See our guide on why "we have backups" isn't a full disaster recovery plan for what a complete plan actually needs.
Paying doesn't guarantee your data is returned or that attackers won't target you again, and authorities generally advise against it. The far better position is not needing to make that decision at all, because a tested backup exists.
Smaller businesses are often assumed to have weaker defences and less capacity to recover on their own, which can make them a more attractive, lower-effort target — not a safer one.
Modern ransomware can encrypt a significant number of files within minutes of activating, which is why detection speed and automatic containment matter as much as prevention.
Book a free security assessment — we'll show you exactly where the gaps are.
