Victims are most frequently subject to phishing attempts, with 530,000 small firms suffering from such an attack over the past two years. Hundreds of thousands of businesses also report incidences of malware (374,000), fraudulent payment requests (301,000) and ransomware (260,000). 

Those based in the North West, South East and West Midlands are most likely to be the victims of cyber-attacks, with 25 percent, 23 percent and 21 percent of small businesses in these areas reporting cyber incidences respectively.

One in three small firms (35 percent) say they have not installed security software over the past two years. Four in ten (40 percent) do not regularly update software, and a similar proportion do not back up data and IT systems. Fewer than half (47 percent) have a strict password policy for devices.     

FSB Policy and Advocacy Chairman Martin McTague said: “These findings demonstrate the sheer scale of the dangers faced by small firms every day in the digital arena. The issue of business crime is overlooked too often – even more so of late in this climate of sustained political uncertainty and inaction. Meaningful steps must be taken to safeguard our small firms, and by extension the wider economy. More small firms are waking up to the threat of cybercrime. It’s a threat that’s evolving rapidly, but too many small businesses still lack access to the resources and budgets needed to contain it."