IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Ransomware remains the top cyber security risk for SMBs

Datto reveals that the average cost of downtime is now 94% greater than last year

Ransomware still poses the biggest malware threat to small and medium-sized businesses (SMBs), cloud cyber security provider Datto has found.

The findings are part of Datto's fifth annual Global State of the Channel Ransomware Report, which surveyed more than 1,000 MSPs on trends driving ransomware breaches, as well as the impact COVID-19 has had on SMB security.

According to the findings, 60% of MSPs reported that their SMB clients have been hit as of Q3 2020, with the average cost of downtime now 94% greater than last year. The figure was also found to be six times greater than 2018, increasing from $46,000 to $274,000. 

More than half (59%) of MSPs said remote work due to COVID-19 resulted in increased ransomware attacks, while 52% said shifting client workloads to the cloud increased security vulnerabilities. In Europe, 42% of MSPs reported that ransomware attacks increased due to remote working.

"The COVID-19 pandemic has accelerated the need for stronger security measures as remote working and cloud applications increase in prevalence," commented Ryan Weeks, Datto’s CISO. 

Globally, healthcare was found to be the most vulnerable industry during the pandemic (59%), while finance and insurance was the most vulnerable in Europe. European MSPs (85%) also reported that their clients suffered more attacks than any other region, with the average cost of downtime continuing to overshadow the actual ransom amount.

In terms of methods, the survey revealed that phishing emails were the most successful form of attack, with 57% of European MSPs reporting it as the top method, while 21% reported attacks on clients’ software as a service (SaaS) applications. 

Windows endpoint systems applications were the most targeted by attackers, with 90% of ransomware attacks targeting Windows PCs across the continent this year, Datto said. 

It’s not just SMB clients that are at risk, either. A massive 95% of MSPs stated that their own businesses are also in danger, with almost half (46%) opting to partner with Managed Security Service Providers to protect both themselves and their clients. 

Related Resource

The essential cyber security toolkit for SMBs

Practical tips for cyber security training

a guide to cyber security for SMBs - Datto whitepaperFree download

SMBs are also upping their security budget to combat the threat, the report revealed, with half the surveyed MSPs reporting that their clients have allocated more funds to protect their business. 

Business continuity and disaster recovery (BCDR) remains the number one solution for combatting ransomware, Datto added, with 91% of MSPs reporting that their clients with BCDR solutions in place are less likely to experience significant downtime during an attack. Employee training and endpoint detection and response platforms came second and third respectively, the report found. 

"Reducing the risk of cyber attacks requires a multi-layered approach rather than a single product – awareness, education, expertise, and purpose-built solutions all play a key role," Weeks added.

"The survey highlights how MSPs are taking the extra step to partner with MSSPs that can offer more security-focused experience, along with a more widespread use of security measures like SSO and 2FA – these are critical strategies businesses and municipalities need to adopt to protect themselves from cyber threats now and in the future."

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Recommended

Mastering endpoint security implementation
Security

Mastering endpoint security implementation

18 May 2022
The Total Economic Impact™ of Apple Mac in Enterprise: M1 update
Whitepaper

The Total Economic Impact™ of Apple Mac in Enterprise: M1 update

12 May 2022
Dell Technologies World 2022: Dell unveils fastest storage architecture in company history
Server & storage

Dell Technologies World 2022: Dell unveils fastest storage architecture in company history

4 May 2022
Dell Technologies World 2022: Dell unveils security offerings for major cloud providers
public cloud

Dell Technologies World 2022: Dell unveils security offerings for major cloud providers

3 May 2022

Most Popular

16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

13 May 2022
Russian hackers declare war on 10 countries after failed Eurovision DDoS attack
hacking

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

16 May 2022
(ISC)2 launches free scheme to get 100,000 UK citizens into cyber security
Careers & training

(ISC)2 launches free scheme to get 100,000 UK citizens into cyber security

17 May 2022