Why Small Businesses Are Big Targets for Cybercriminals — And How to Protect Yours This Summer

While employees unplug and business routines loosen up, cybercriminals ramp up their activity, targeting the often-overlooked weak links in small business security.

Summer isn’t just peak season for vacations — it’s also prime time for cybercrime.

According to a 2024 report from the Verizon Data Breach Investigations Report (DBIR), 43% of cyberattacks are aimed at small businesses. Yet many remain underprepared, assuming they’re “too small to notice.” That mindset is exactly what makes them such easy targets.

Why Are Small Businesses a Hot Target?

  1. Lower defenses. Small businesses often lack dedicated IT staff or layered defenses, making them easy entry points for bad actors. 
  2. Valuable data. Even the smallest companies handle customer payment info, personal data, or sensitive emails — all lucrative on the dark web. 
  3. Supply chain foothold. Cybercriminals use smaller vendors as a gateway to attack larger partners, especially in industries like retail, finance, and healthcare. 

Why Summer, though?

The summer season often brings about: 

  • Reduced staffing due to vacations. 
  • Distracted employees working from mobile devices or new locations. 

Higher online shopping and travel bookings, increasing phishing and spoofing opportunities.

6 Summer Cybersecurity Steps for Small Businesses

6 Summer Cybersecurity Steps for Small Businesses

At Plain English Technology Services, we help businesses stay protected year-round. Here are six key steps to reduce your risk this summer: 

1. Train Your Team on Summer Phishing Tactics 

Cybercriminals ramp up fake emails and text messages disguised as delivery alerts, vacation bookings, or employee updates. Teach your staff how to spot suspicious messages — especially on mobile devices. 

Here’s CISA’s Phishing Tip Sheet to help you out. 

2. Enable Multi-Factor Authentication (MFA) Everywhere 

Whether you’re checking email at a beach resort or logging into a POS system at a summer market, MFA adds a vital layer of protection against stolen credentials. 

Microsoft reports that MFA can block over 99% of automated attacks. 

3. Keep Software and Devices Updated 

Summer is not the time to delay updates. Patch your systems regularly, including your point-of-sale devices, business apps, and remote laptops. 

Cybercriminals often exploit known vulnerabilities that have been unpatched for months. 

4. Backup Everything — Securely 

Whether it’s QuickBooks, customer records, or marketing files, make sure you have secure, offsite backups. Cloud services can fail or be compromised. A solid backup and disaster recovery plan is non-negotiable. 

Plain English Technology Services offers full backup solutions that safeguard your business data, even when you’re away. 

5. Secure Wi-Fi & Remote Access 

Employees working remotely at cafés, hotels, or vacation homes? Public Wi-Fi is a playground for hackers. Try to use VPNs to ensure remote access tools are secured. 

Weak remote setups remain one of the leading causes of breaches in 2025, according to IBM’s Cost of a Data Breach Report. 

6. Monitor for Domain Spoofing and Impersonation 

Scammers create lookalike websites or emails to trick your customers. Protect your domain, use DMARC/SPF/DKIM settings, and monitor for impersonation attempts. 

Ask Plain English Technology Services about our tools that alert you when someone tries to spoof your business online. 

Don’t Let Your Guard Down This Summer

Cybersecurity isn’t seasonal. If you’re relaxing — hackers are working. Now’s the time to reinforce your digital defenses so you can enjoy summer without worrying. 

Need a quick summer cybersecurity checkup? 
Plain English Technology Services offers excellent protection tailored for small businesses in Bellingham, WA and beyond to the I-5 corridor in Oregon.

Share this Post:
Scroll to Top