Attackers Target Both Large and Small Businesses Like thrown paint on a blank canvas, attacks against businesses, both large and small, appear indiscriminate. If there is profit to be made, attackers strike at will. Spear-Phishing Attacks by Size of Targeted Organization The last five years have shown a steady increase in attacks targeting businesses with less than 250 employees. Medium-Size Businesses 251 to 2,500 Large Enterprises 2,500+ Small Businesses (SMBs) 1 to 250 Number of Employees 0 100% 2011 2012 2013 2015 2014 2015 2014 2013 Risk Ratio as % 2.2 2.1 Risk Ratio of Spear-Phishing Attacks by Organization Size 1 in 2.7 1 in 6.8 1 in 40.5 Risk Ratio Attacks per Org 15 % 3 % 2015 3.6 38 % 1 , 305 +55% 841 Cyber attackers are playing the long game against large companies, but all businesses of all sizes are vulnerable to targeted attacks. In fact, the number of spear-phishing campaigns targeting employees increased 55% in 2015. 779 +91% +8% 50 % 32 % 18 % 50 % 19 % 31 % 39 % 31 % 30 % 41 % 25 % 34 % 35 % 22 % 43 %