Key Takeaways
- FBI complaint data measure reported complaints, not every cyber incident.
- Verizon breach findings describe confirmed cases in its dataset, not the entire economy.
- Small firms can start with identity, backup, patching, and incident-response controls.
Small business cybersecurity statistics are often quoted without a denominator. Complaint totals do not show the chance that one business will be attacked. Confirmed breach datasets do not capture every attempted intrusion. Survey answers may reflect awareness as much as actual exposure.
What the public data measure
The FBI Internet Crime Complaint Center received 859,532 complaints in 2024 and reported losses above $16 billion. Those numbers cover individuals and organizations that filed complaints. They do not provide a small-business incident rate. The FBI also warns that complaint data may include incomplete or inaccurate information.
Verizon's 2025 Data Breach Investigations Report analyzed more than 22,000 security incidents, including 12,195 confirmed breaches. Its small and medium business section offers useful patterns within that contributed dataset. It is not a census of U.S. firms.
The Federal Trade Commission received 1.1 million identity-theft reports through Consumer Sentinel in 2024. That figure describes consumer reporting and should not be relabeled as business breach volume.
Controls a small firm can verify
NIST's Cybersecurity Framework 2.0 organizes work around govern, identify, protect, detect, respond, and recover. A small firm can turn those functions into a short operating list: require multifactor authentication, remove access when a worker leaves, install supported updates, test backups, record vendors with sensitive access, and write an incident contact sheet.
Administrative support can maintain the evidence behind those controls. A data entry virtual assistant can update approved inventories and access-review logs, but should not receive administrator rights merely to maintain records. Security decisions stay with the accountable owner.
Sources
Tags
Ready to put this into practice?
Book a free 15-min match call
Tell us what role you're filling. We'll match you with a pre-vetted virtual assistant - or tell you honestly if we're not the right fit.
Book a free call →