SMBs were the number one target for hackers in 2025

Small and medium sized businesses (SMBs) were the number one target for hackers in 2025.

According to the Data Breach Observatory (part of Swiss company Proton AG), as reported by The Hacker News (24 December 2025).

In this context SMBs are defined as employing between 1 and 249 employees.

Retail, tech, media and entertainment businesses were most frequently targeted.

Names and contact details were the most common records to appear on the dark web, increasing the risk of phishing attacks targeting workers.

The article includes Data Breach Observatory suggestions (summarised below) for how SMBs might reduce the risk of data breaches.

How to reduce the risk of data breach

Employ two-factor authentication.

Limit access control to your network on a strict needs basis.

Implement strong password protocols.

Consider employing a tool or service to regularly scan the dark web for leaked sensitive business data.

Store sensitive data securely to reduce the risk of employees being targeted by phishing attacks.

Employ two-factor authentication.

Limit access control to your network on a strict needs basis.

Implement strong password protocols.

Consider employing a tool or service to regularly scan the dark web for leaked sensitive business data.

Store sensitive data securely to reduce the risk of employees being targeted by phishing attacks.