SMBs were the number one target for hackers in 2025

Small and medium sized businesses (SMBs) were the number one target for hackers in 2025.

According to the Data Breach Observatory (part of Swiss company Proton AG), as reported by The Hacker News (24 December 2025).

In this context SMBs are defined as employing between 1 and 249 employees.

Retail, tech, media and entertainment businesses were most frequently targeted.

Names and contact details were the most common records to appear on the dark web, increasing the risk of phishing attacks targeting workers.

The article includes Data Breach Observatory suggestions (summarised below) for how SMBs might reduce the risk of data breaches.

Read more: Ways to protect your business in 2026.

How to reduce the risk of data breach

Employ two-factor authentication.

Limit access control to your network on a strict needs basis.

Implement strong password protocols.

Consider employing a tool or service to regularly scan the dark web for leaked sensitive business data.

Store sensitive data securely to reduce the risk of employees being targeted by phishing attacks.

Related Links

Read more: Data Breach Observatory.

Read more: About Proton AG.

About The Hacker News

"The Hacker News (THN) stands as a top and reliable source for the latest updates in cybersecurity. As an independent outlet, we offer balanced and thorough insights into the cybersecurity sector, trusted by professionals and enthusiasts alike."

Subscribe to The Hacker News newsletter when you visit the following link.

And keep up to speed with the latest security threats affecting your Operating System, Web Browser and Website.

Read more: About 'The Hacker News' Media.