{"id":23418,"date":"2026-05-18T14:05:58","date_gmt":"2026-05-18T13:05:58","guid":{"rendered":"https:\/\/www.policybee.co.uk\/blog\/?p=23418"},"modified":"2026-05-28T11:34:15","modified_gmt":"2026-05-28T10:34:15","slug":"average-cost-of-data-breach-for-small-business","status":"publish","type":"post","link":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business","title":{"rendered":"The average cost of a data breach for a small business"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"300\" src=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png\" alt=\"A woman considers the average cost of a data breach in the UK\" class=\"wp-image-27852\" style=\"object-fit:cover;width:300px;height:150px\" srcset=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png 600w, https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image-300x150.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Cybercrime is a big problem for the UK. In 2025, it cost the UK economy an\u202f<a href=\"https:\/\/www.gov.uk\/government\/publications\/independent-research-on-the-economic-impact-of-cyber-attacks-on-the-uk\/summary-of-research-on-the-economic-impact-of-cyber-attacks\" target=\"_blank\" rel=\"noreferrer noopener\">estimated \u00a314.7 billion<\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the most high-profile and impactful areas of cybercrime is data breaches. You know those stories <a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cm2r9m12e17o\" target=\"_blank\" rel=\"noreferrer noopener\">where a company&nbsp;or government organisation&nbsp;is hacked<\/a>\u202fand their data is either held ransom, leaked to the world, or sold?&nbsp;That\u2019s&nbsp;a data breach.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What impact do data breaches have on small businesses?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">At worst, the average cost of a data breach for businesses can be devastating. At best,&nbsp;they\u2019re&nbsp;an expensive nuisance that forces you to stay on your toes.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/c5ye8zj5l4jo\" target=\"_blank\" rel=\"noreferrer noopener\">Larger businesses&nbsp;are targeted the most<\/a>. Their data is the most valuable for cybercriminals, but also difficult to get.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Why? Well, they have more budget to spend on cybersecurity and experts. So, they can set up tough defences around their data.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/ico.org.uk\/about-the-ico\/media-centre\/news-and-blogs\/2025\/04\/law-firm-fined-60-000-following-cyber-attack\/\" target=\"_blank\" rel=\"noreferrer noopener\">These criminals will go after smaller businesses too<\/a>. The rewards are smaller but the data&#8217;s easier for them to get their hands on.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Cyber insurance is one way of reducing the impact of data breaches on your business.&nbsp;Take a look&nbsp;at how we can support you with&nbsp;<\/em><a href=\"https:\/\/www.policybee.co.uk\/cyber-insurance\" target=\"_blank\" rel=\"noreferrer noopener\"><em>advice and guidance on what you need<\/em><\/a><em>.<\/em>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How many UK businesses have experienced some kind of data breach?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The government\u2019s latest Cyber Security Breaches Survey reveals that\u202f<a href=\"https:\/\/www.gov.uk\/government\/statistics\/cyber-security-breaches-survey-2025\/cyber-security-breaches-survey-2025\" target=\"_blank\" rel=\"noreferrer noopener\">43% of all UK businesses experienced some form of cybersecurity breach<\/a>\u202fin the last 12 months. For large businesses, this rises to 74%.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s&nbsp;over a third of all UK businesses and&nbsp;nearly three-quarters&nbsp;of bigger organisations. Not forgetting many smaller businesses have no way of detecting cyber-attacks. So,&nbsp;there are potentially thousands of attacks going unrecorded.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Of the recorded attacks, the UK government estimates that&nbsp;<a href=\"https:\/\/www.gov.uk\/government\/statistics\/cyber-security-breaches-survey-2025\/cyber-security-breaches-survey-2025\" target=\"_blank\" rel=\"noreferrer noopener\">UK businesses experienced 8.58 million cybercrimes in 2025<\/a>.&nbsp;That\u2019s&nbsp;over 24,000 per day.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The continuing evolution&nbsp;of&nbsp;AI&nbsp;is also having an impact on the world of cybercrime. <a href=\"https:\/\/www.ncsc.gov.uk\/report\/impact-of-ai-on-cyber-threat\" target=\"_blank\" rel=\"noreferrer noopener\">The\u202fNational Cyber Security Centre (NCSC) has highlighted the importance of properly protecting your&nbsp;business<\/a>, as cybercriminals begin to utilise AI to improve the speed and impact of cyber-attacks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But just what is the average cost of a data breach for UK businesses? And what sort of impact can data breaches have on businesses?&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"300\" src=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-2.png\" alt=\"A statistic showing that 24,000 cybercrimes hit UK business every day\" class=\"wp-image-27854\" srcset=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-2.png 600w, https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-2-300x150.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What is the average cost of a data breach for UK businesses?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s&nbsp;difficult to put a firm number on the cost of a data breach in the UK. It depends on the size of your company, how much data you store, what your business does, and much more.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are a few ways we can measure it, though.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">First, we can look at the average cost of a data breach around the world. According to technology giant IBM, which looked at data from 16 different countries and regions, <a href=\"https:\/\/www.northdoor.co.uk\/insight\/news\/cost-of-a-data-breach-report-2025\/\" target=\"_blank\" rel=\"noreferrer noopener\">it was $4.44&nbsp;million<\/a>&nbsp;(or \u00a33.6 million)\u202fin 2025.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s&nbsp;worth mentioning that this stat&nbsp;doesn\u2019t&nbsp;include&nbsp;very small&nbsp;or&nbsp;very large&nbsp;breaches. For huge companies that have vast amounts of data, a breach will cost them a lot more.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Likewise for small businesses, the cost will be a lot lower as they store much less data.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So,&nbsp;let\u2019s&nbsp;look at it another way.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2025,\u202f<a href=\"https:\/\/www.gov.uk\/government\/statistics\/cyber-security-breaches-survey-2025\/cyber-security-breaches-survey-2025#chapter-6-cyber-crime\" target=\"_blank\" rel=\"noreferrer noopener\">the average cost of cybercrime on a UK business was around \u00a3990<\/a>. Looks a lot lower than $4.44&nbsp;million, doesn\u2019t it? Well, this stat includes forms of cybercrime which will be much cheaper to sort out. Especially those that&nbsp;don\u2019t&nbsp;involve stolen data.&nbsp;The government\u2019s calculation also included cyber-attacks that&nbsp;didn\u2019t&nbsp;result in any&nbsp;financial loss.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This stat also&nbsp;takes into account&nbsp;all businesses, including&nbsp;very small&nbsp;businesses, which IBM&nbsp;didn\u2019t&nbsp;do in their study. Thousands of small businesses are affected by cybercrime every year. But naturally, their clean-up costs are a lot lower.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you consider that small businesses make up&nbsp;around\u202f<a href=\"https:\/\/www.gov.uk\/government\/statistics\/business-population-estimates-2025\/business-population-estimates-for-the-uk-and-regions-2025-statistical-release\" target=\"_blank\" rel=\"noreferrer noopener\">99%&nbsp;of our business population in the UK<\/a>, it makes sense that including them would drive down the average cost.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Regardless, this amount of money can cause real problems for small and micro-businesses. But there are other, less measurable issues that they might have to face\u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How often are small businesses hit by cyber-attacks?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We&nbsp;won\u2019t&nbsp;mince words. A successful data breach of a small business can cause chaos.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Why? Well, it comes down to investment in cybersecurity. A small business&nbsp;doesn\u2019t&nbsp;have as much budget to spend on defending themselves from cybercriminals.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They also&nbsp;don\u2019t&nbsp;have as much access to experts who can&nbsp;monitor&nbsp;and log attacks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A report by Hiscox in 2018 estimated that UK small businesses were targeted with\u202f<a href=\"https:\/\/www.hiscoxgroup.com\/news\/press-releases\/2018\/18-10-18\" target=\"_blank\" rel=\"noreferrer noopener\">65,000 cyber-attacks per day<\/a>. And that over 4,500 of those attacks were successful.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This means that a small business was successfully breached every 19 seconds.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Other global and UK-based data&nbsp;we\u2019ve&nbsp;highlighted in this blog shows us that post-pandemic,&nbsp;it\u2019s&nbsp;highly likely that this number of attacks will have risen&nbsp;significantly.&nbsp;Especially with the increasing use of AI in cybercrime.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How much do data breaches cost small businesses<\/strong>?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">What does&nbsp;being&nbsp;breached&nbsp;actually mean&nbsp;for a small business? Hiscox found\u202f<a href=\"https:\/\/www.hiscoxgroup.com\/news\/press-releases\/2018\/18-10-18\" target=\"_blank\" rel=\"noreferrer noopener\">it costs them about \u00a325,700 in clean-up costs<\/a>, on average. This includes restoring systems, paying ransoms, replacing hardware, and investing in better security after&nbsp;they\u2019ve&nbsp;been breached.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The increasing use of AI in cyber-attacks, higher hardware costs, and cost of living increases will have undoubtedly added to these costs since their report was published.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second big hurdle they&nbsp;have to&nbsp;face is less measurable. Business interruption, damage to their reputation, difficulty getting customers in the future. These problems are far more likely to lead to a small business closing after a data breach.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.hiscoxgroup.com\/sites\/group\/files\/documents\/2025-10\/HSX374%20%E2%80%93%202025%20CRR%20Report%20Final.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Hiscox\u2019s 2025 Cyber Readiness report<\/a>&nbsp;highlighted some other, less obvious costs that are byproducts of a data breach.&nbsp;87% of businesses that experienced a cyber-attack reported spending more of their budget on&nbsp;adapting to&nbsp;new and updated data protection&nbsp;regulation.&nbsp;And 33% reported receiving a&nbsp;significant fine&nbsp;after an attack.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Proactive spending after an attack, whether to improve cybersecurity, update processes, or pay&nbsp;fines&nbsp;from regulators like the&nbsp;<a href=\"https:\/\/ico.org.uk\/\" target=\"_blank\" rel=\"noreferrer noopener\">ICO (Information Commissioner\u2019s Office)<\/a>, is another area that small businesses&nbsp;have to&nbsp;bear in mind.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With challenges like these in mind,&nbsp;it\u2019s&nbsp;easy to see how a small business could struggle to keep its doors open. Especially if they were faced with a particularly damaging data breach.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What are the different kinds of data breaches?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are&nbsp;many different kinds of&nbsp;data breaches. Some of which are complex and nuanced, while others are about as subtle as throwing a brick through a window.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The main ones you need to watch out for involve exploiting human error.&nbsp;<a href=\"https:\/\/app.stationx.net\/articles\/cyber-security-breach-statistics\" target=\"_blank\" rel=\"noreferrer noopener\">Stanford University research found that around 88% of all data breaches are caused by human error<\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s&nbsp;why training your staff is so important. So,&nbsp;they can avoid the tricks and tactics that cybercriminals love to use.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These include&nbsp;<a href=\"https:\/\/www.policybee.co.uk\/blog\/how-to-protect-your-small-business-from-phishing-attacks\" target=\"_blank\" rel=\"noreferrer noopener\">phishing emails<\/a>, where a fake email is used to gain access to a system. Or&nbsp;<a href=\"https:\/\/www.policybee.co.uk\/blog\/ransomware-insurance-a-simple-guide\" target=\"_blank\" rel=\"noreferrer noopener\">ransomware<\/a>, where someone inadvertently installs malware on your network, allowing a cybercriminal to hold your data hostage in exchange for a ransom payment.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Outside of human error, there are physical breaches. A criminal might steal an employee\u2019s laptop or&nbsp;phone, or&nbsp;break into your office and rip a hard drive out of a computer.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These are just a few examples of data breaches.&nbsp;In reality, there&nbsp;are\u202f<a href=\"https:\/\/www.veritas.com\/information-center\/the-seven-most-common-types-of-data-breaches-and-how-they-affect-your-business\" target=\"_blank\" rel=\"noreferrer noopener\">numerous&nbsp;techniques that cybercriminals&nbsp;use<\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most important thing is that you have some kind of cybersecurity in place.&nbsp;<a href=\"https:\/\/www.policybee.co.uk\/blog\/cybersecurity-risks-for-small-businesses\" target=\"_blank\" rel=\"noreferrer noopener\">It\u2019s all about prevention<\/a>.&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"300\" src=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-1.png\" alt=\"A statistic showing that 88% of data breaches are caused by human error\" class=\"wp-image-27853\" srcset=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-1.png 600w, https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_graphic-1-300x150.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Where does UK GDPR come in?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You\u2019ve&nbsp;probably heard&nbsp;a lot of talk about UK GDPR over the last few years.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It stands for\u202f<a href=\"https:\/\/www.gov.uk\/data-protection\" target=\"_blank\" rel=\"noreferrer noopener\">UK General Data Protection Regulation<\/a>.&nbsp;It\u2019s&nbsp;a set of rules that makes sure personal data is used responsibly by businesses.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You\u2019ll&nbsp;often hear about it when companies are fined for&nbsp;failing to follow&nbsp;the rules. Usually in connection to a data breach.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a company is breached, it might be found that it&nbsp;didn\u2019t&nbsp;protect its data properly. This is a big no-no when it comes to UK GDPR.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So much so that they can be investigated by the regulator (the Information Commissioner\u2019s Office) and\u202f<a href=\"https:\/\/www.gov.uk\/data-protection\" target=\"_blank\" rel=\"noreferrer noopener\">fined up to \u00a317.5 million, or 4% of their annual global turnover<\/a>. Whichever is greater.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Smaller businesses&nbsp;probably wouldn\u2019t&nbsp;see a fine anywhere near this level.\u202f<a href=\"https:\/\/www.urmconsulting.com\/blog\/analysis-of-fines-imposed-by-the-information-commissioners-office-in-2022\" target=\"_blank\" rel=\"noreferrer noopener\">But they can still be fined thousands of pounds<\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Putting up the right defences<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Don\u2019t&nbsp;want to be on the receiving end of a data breach? We&nbsp;don\u2019t&nbsp;blame you. Because the average cost of a data breach for small businesses in the UK can be crippling.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The best way to stop them is by prevention. Investing whatever&nbsp;budget&nbsp;you can afford into cybersecurity will make&nbsp;a huge difference. The\u202f<a href=\"https:\/\/www.ncsc.gov.uk\/\" target=\"_blank\" rel=\"noreferrer noopener\">National Cyber Security Centre (NCSC)<\/a>\u202fis a great resource for actionable advice.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following their advice can help you mitigate the chances of being hit by a cyber-attack. And make it&nbsp;way harder&nbsp;for cybercriminals to sneak in and cause&nbsp;havoc, if&nbsp;they choose you as a target.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Chances are, though, that you will be breached at some point. Being prepared for it can help you get ahead of the problems&nbsp;you\u2019ll&nbsp;face.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.policybee.co.uk\/cyber-insurance\" target=\"_blank\" rel=\"noreferrer noopener\">Cyber insurance is a great way to&nbsp;do this<\/a>.&nbsp;It\u2019ll&nbsp;pay your recovery costs. Help you manage any PR difficulties you might face. And bring the average cost of a data breach down.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some policies even offer online cybersecurity training for your staff. So,&nbsp;you can avoid common pitfalls that can lead to data breaches.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can also add on extra cover for&nbsp;<a href=\"https:\/\/www.policybee.co.uk\/blog\/a-guide-to-social-engineering-insurance\" target=\"_blank\" rel=\"noreferrer noopener\">social engineering<\/a>&nbsp;and financial cybercrime&nbsp;\u2013&nbsp;two&nbsp;of the most common forms of cybercrime.&nbsp;Or patch on&nbsp;financial relief&nbsp;if your business&nbsp;isn&#8217;t&nbsp;able to trade due to a cyber-attack.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We&#8217;ve&nbsp;written an in-depth guide on\u202f<a href=\"https:\/\/www.policybee.co.uk\/blog\/what-is-cyber-insurance-and-what-does-it-cover\" target=\"_blank\" rel=\"noreferrer noopener\">what cyber&nbsp;insurance is and what it covers<\/a>. Or you can give us a ring on\u202f<strong>0345 222 5391\u202f<\/strong>and talk with one of our friendly advisers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Image used under licence from iStock.<\/em>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybercrime is a big problem for the UK. In 2025, it cost the UK economy an\u202festimated \u00a314.7 billion.&nbsp; One of the most high-profile and impactful areas of cybercrime is data breaches. You know those stories where a company&nbsp;or government organisation&nbsp;is &hellip; <a href=\"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[288,291,136],"tags":[300,158,284,150,265],"class_list":["post-23418","post","type-post","status-publish","format-standard","hentry","category-cyber-insurance","category-facts-and-figures","category-news","tag-cyber-insurance-2","tag-cyber-insurance","tag-gdpr","tag-managing-risk","tag-statistics"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\r\n<title>The average cost of a data breach for small businesses<\/title>\r\n<meta name=\"description\" content=\"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.\" \/>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business\" \/>\r\n<meta property=\"og:locale\" content=\"en_GB\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"The average cost of a data breach for small businesses\" \/>\r\n<meta property=\"og:description\" content=\"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business\" \/>\r\n<meta property=\"og:site_name\" content=\"PolicyBee news and risk advice\" \/>\r\n<meta property=\"article:published_time\" content=\"2026-05-18T13:05:58+00:00\" \/>\r\n<meta property=\"article:modified_time\" content=\"2026-05-28T10:34:15+00:00\" \/>\r\n<meta property=\"og:image\" content=\"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png\" \/>\r\n\t<meta property=\"og:image:width\" content=\"600\" \/>\r\n\t<meta property=\"og:image:height\" content=\"300\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\r\n<meta name=\"author\" content=\"Pete Warner\" \/>\r\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\r\n<meta name=\"twitter:creator\" content=\"@PolicyBee\" \/>\r\n<meta name=\"twitter:site\" content=\"@PolicyBee\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pete Warner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business\"},\"author\":{\"name\":\"Pete Warner\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/8503cbee1e5b3842c795256a0c5e53d0\"},\"headline\":\"The average cost of a data breach for a small business\",\"datePublished\":\"2026-05-18T13:05:58+00:00\",\"dateModified\":\"2026-05-28T10:34:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business\"},\"wordCount\":1846,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Data-breach-blog_hero-image.png\",\"keywords\":[\"cyber insurance\",\"cyber liability insurance\",\"GDPR\",\"managing risk\",\"statistics\"],\"articleSection\":[\"Cyber insurance\",\"Facts &amp; figures\",\"News\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business\",\"url\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business\",\"name\":\"The average cost of a data breach for small businesses\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Data-breach-blog_hero-image.png\",\"datePublished\":\"2026-05-18T13:05:58+00:00\",\"dateModified\":\"2026-05-28T10:34:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/8503cbee1e5b3842c795256a0c5e53d0\"},\"description\":\"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#primaryimage\",\"url\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Data-breach-blog_hero-image.png\",\"contentUrl\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Data-breach-blog_hero-image.png\",\"width\":600,\"height\":300,\"caption\":\"A woman considers the average cost of a data breach in the UK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/average-cost-of-data-breach-for-small-business#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The average cost of a data breach for a small business\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/\",\"name\":\"PolicyBee news and risk advice\",\"description\":\"Articles and information on professional indemnity insurance, small business news and risk management\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.policybee.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/8503cbee1e5b3842c795256a0c5e53d0\",\"name\":\"Pete Warner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g\",\"caption\":\"Pete Warner\"}}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The average cost of a data breach for small businesses","description":"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business","og_locale":"en_GB","og_type":"article","og_title":"The average cost of a data breach for small businesses","og_description":"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.","og_url":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business","og_site_name":"PolicyBee news and risk advice","article_published_time":"2026-05-18T13:05:58+00:00","article_modified_time":"2026-05-28T10:34:15+00:00","og_image":[{"width":600,"height":300,"url":"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png","type":"image\/png"}],"author":"Pete Warner","twitter_card":"summary_large_image","twitter_creator":"@PolicyBee","twitter_site":"@PolicyBee","twitter_misc":{"Written by":"Pete Warner","Estimated reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#article","isPartOf":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business"},"author":{"name":"Pete Warner","@id":"https:\/\/www.policybee.co.uk\/blog\/#\/schema\/person\/8503cbee1e5b3842c795256a0c5e53d0"},"headline":"The average cost of a data breach for a small business","datePublished":"2026-05-18T13:05:58+00:00","dateModified":"2026-05-28T10:34:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business"},"wordCount":1846,"commentCount":0,"image":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#primaryimage"},"thumbnailUrl":"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png","keywords":["cyber insurance","cyber liability insurance","GDPR","managing risk","statistics"],"articleSection":["Cyber insurance","Facts &amp; figures","News"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business","url":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business","name":"The average cost of a data breach for small businesses","isPartOf":{"@id":"https:\/\/www.policybee.co.uk\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#primaryimage"},"image":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#primaryimage"},"thumbnailUrl":"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png","datePublished":"2026-05-18T13:05:58+00:00","dateModified":"2026-05-28T10:34:15+00:00","author":{"@id":"https:\/\/www.policybee.co.uk\/blog\/#\/schema\/person\/8503cbee1e5b3842c795256a0c5e53d0"},"description":"Find out how much a data breach can cost small businesses. (Spoiler: a lot.) Plus, what you can do to protect yourself against cyber-attacks.","breadcrumb":{"@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#primaryimage","url":"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png","contentUrl":"https:\/\/www.policybee.co.uk\/blog\/wp-content\/uploads\/2026\/05\/Data-breach-blog_hero-image.png","width":600,"height":300,"caption":"A woman considers the average cost of a data breach in the UK"},{"@type":"BreadcrumbList","@id":"https:\/\/www.policybee.co.uk\/blog\/average-cost-of-data-breach-for-small-business#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.policybee.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"The average cost of a data breach for a small business"}]},{"@type":"WebSite","@id":"https:\/\/www.policybee.co.uk\/blog\/#website","url":"https:\/\/www.policybee.co.uk\/blog\/","name":"PolicyBee news and risk advice","description":"Articles and information on professional indemnity insurance, small business news and risk management","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.policybee.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.policybee.co.uk\/blog\/#\/schema\/person\/8503cbee1e5b3842c795256a0c5e53d0","name":"Pete Warner","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f564969b62f9e2ddcd7857451a5fea06c6db345efc498dac09620887b63e2a89?s=96&d=mm&r=g","caption":"Pete Warner"}}]}},"_links":{"self":[{"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/posts\/23418","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=23418"}],"version-history":[{"count":34,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/posts\/23418\/revisions"}],"predecessor-version":[{"id":27963,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/posts\/23418\/revisions\/27963"}],"wp:attachment":[{"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=23418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=23418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.policybee.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=23418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}