Most European small and medium-sized businesses are not ready for cyberattacks, according to a new report from Kaspersky. The report says that only 29% of these businesses have a complete cybersecurity plan in place, which leaves most of them at risk from increasing online threats. About 65% of them say their plans are either just ideas or are separate goals that aren't connected, and many don't have the money or know-how to protect themselves well.
The study, “How cyberattackers are targeting SMBs in Europe and Africa in 2025,” shows that 33% of companies say they are weak when it comes to handling and recovering from cyber incidents.
Nearly half (48%) say their cybersecurity plan is only written down and not actually working yet. This lack of real action makes SMEs easy targets for hackers.
From January to April 2025, Austria (40%), Italy (25%), and Germany (11%) had the most reported attacks on small businesses.
Kaspersky says the absence of proper planning, funding, and trained staff continues to make SMEs weak against cyber threats. As a result, many IT managers say they don't feel confident in their company's ability to stop or deal with cyberattacks.
Related News