New announcement. Learn more

TAGS

"My business is too small to worry about IT security" - Think again

You’ve seen the headlines: cybercrime is escalating at an alarming pace.

From multinational corporations to local retailers, digital threats are growing rapidly.  Government, Insurers, IT professionals and global news outlets are increasingly flagging cyber and data-related risks as critical concerns for the future.

But what’s often overlooked is the growing complexity of the supply chain. A single breach can now ripple across multiple tiers of suppliers, partners, and customers, triggering widespread interruption losses. These disruptions amplify the potential fallout from cyber incidents, with just one breach capable of compromising data integrity, halting operations and exposing sensitive information across multiple partners. 

The interconnected nature of today’s supply chains means that cyber resilience is no longer just an IT issue, it’s a strategic imperative. Unfortunately, many businesses remain unaware of the full extent of their vulnerabilities. Small businesses in particular are taking the brunt of the hit.

One of Willis Temby’s insurance partners, Atmos Australia & New Zealand, recently released data showing that over 50% of cyberattacks reported in 2025 targeted businesses with 1 – 100 employees.

Micro and small businesses are especially susceptible to Business Email Compromise and Funds Transfer Fraud Incidents, with Atmos reporting a median of $26,215 funds misdirected from attacks.

During Macquarie Bank’s recent Insurance Industry Discussion, a spokesperson highlighted concern in the slow uptake on cyber insurance. Despite growing awareness, many businesses – particularly small to mid-sized enterprises – are still hesitant to invest in coverage.

This reluctance persists even as insurers are broadening policy conditions, offering more flexible terms and tailored solutions to meet evolving risk profiles.

Cybercriminals are increasingly targeting smaller suppliers with limited defences, fully aware that breaching these weak links can grant them access to broader, interconnected supply chains.

September to November is considered the ‘busy season’ for dark web activity, with cybercriminals attacking while companies are stretched thin. If you haven’t protected your business, now is the time. 

Speak to our experts to learn more about Cyber Insurance.