Facing Greater Risks, Small Businesses Still Lag in Adopting Cyber Insurance

Updated: July 14, 2026 by Guest Contributor 3 min read April 19, 2016

What difference does $4.40 make? It can’t buy you much on its own, but it can make a world of difference when you’re handling the aftermath of a data breach or other cyberattack. That’s how much cyber insurance protection reduces the per-record cost of a data breach, according to the Ponemon Institute’s 2015 Cost of a Data Breach report. Whether you’re a small business owner with just a few hundred customers or a global corporation with records in the millions, the cost of being without cyber insurance in the wake of an incident can be extreme.

When you consider the sheer number of records involved in recent mega-breaches — more than 78 million in the Anthem breach alone — the cost reduction can easily soar into hundreds of million dollars saved. And while smaller businesses may have fewer records to be breached, the impact of an attack can be even more devastating to them than to global entities when they experience a mega-breach.

Yet less than one-third (32 percent) of businesses surveyed for Ponemon’s study reported having cyber insurance. The percentage was a bit better when theRisk Management Society (RIMS)asked 284 of its members about cyber insurance; 51 percent reported having stand-alone cyber insurance policies. Even fewer small businesses report having cyber insurance. Just 5 percent of small business owners surveyed byEndurance International Groupsaid they carried cyber insurance, despite 81 percent believingcybersecurityis a concern for small business.

Those who have cyber insurance clearly understand its value. RIMS members said they bought policies to:

  • Reduce the risk of an incident damaging their company’s reputation (79 percent).
  • Minimize the potential impact of business interruption (78 percent).
  • Aid in data breach response and notification (73 percent).

What’s more, of the RIMS members who didn’t have cyber insurance, 74 percent said they were considering buying it within the next 12–24 months.

While small business owners also appear aware of the risk, they seem less cognizant of the benefits of cyber insurance and other cybersecurity measures. Endurance found that although 94 percent of small business owners said they do think about cybersecurity issues, and nearly a third have experienced an attack or an attempt, just 42 percent have invested incybersecurityin the past year. A widely reported study by the National Cyber Security Alliance asserts that 60 percent of small businesses that experience a data breach go out of business within six months.

Cyber insurance premiums vary widely and are largely tied to a company’s revenues and exposure. Policies typically aim to address risks commonly associated with acyberattack, including:

  • Liability for loss of confidential information that occurs through unauthorized access to a company’s computer systems.
  • Data breach costs including notification of affected consumers, customer support and providing credit monitoring to affected customers.
  • The costs of restoring, improving or replacing compromised technologies.
  • Regulatory compliance costs.
  • Business interruption expenses.

Of course, like virtually any other type of insurance, cyber insurance policies can be customized to address the risks facing the individualpolicy holder. Many in the insurance industry feel that cyber insurance products have matured, evolving into a type of protection that businesses both large and small simply can’t afford to do without.

When you consider the devastating risk of facing acyberattackwithout insurance, that simple per-record cost savings of just $4.40 takes on a much deeper meaning. While more large companies are seeing the value of cyber insurance, small business owners need to begin incorporating this valuable type of protection into their overall cyber security plans.

Related Posts

Rethinking Charged-Off Portfolio Prioritization

Experian’s new Recovery Scores model turns portfolio intelligence into more focused recovery strategies, helping organizations improve returns, direct effort and accelerate speed to cash. The challenge isn’t simply working more accounts. Whether a debt buyer is evaluating an acquisition, an agency is deciding where to assign collector time or a lender is managing its own post-charge-off accounts, the question is similar: How can limited capacity be directed toward accounts with the greatest potential for recovery? Prioritizing accounts mainly by age, balance or when they were last worked may not show which ones are most likely to generate a recovery. With the new Recovery Scores model, organizations can rank charged-off accounts by expected collectability, providing a consistent signal to inform placement strategy and treatment decisions across the recovery lifecycle. Make collector capacity a strategic resource Working every account with the same level of attention isn’t always practical. The more useful question is: Where should teams focus first to protect speed to cash? Our model performance analysis found: 80% of recovered dollars come from the top 40% of accounts worked. The value isn’t simply a better ranking. It’s how organizations can use it for collections optimization. Score bands can inform different strategies for placement, outsourcing, auction and legal channel treatment rather than applying the same approach across an entire portfolio. For debt buyers: The scores can inform acquisition pricing and how a newly purchased portfolio is divided across internal collections, legal channels and resale. Expected collectability can shape debt portfolio analysis, including how a portfolio is valued and segmented before collection work begins. For agencies: Score bands can help teams focus collector resources on accounts with stronger recovery potential. For first-party lenders: Managing recovery internally, the scores provide another signal to help structure decisions about which accounts to work and in what order. Look beyond collectability alone Prioritization rarely comes down to a single variable. Consider two accounts that both rank highly for expected collectability, but one has a substantially larger balance. Their recovery likelihood may be similar, but the potential dollars recovered are not. The Recovery Scores model uses debt collections analytics by combining Experian’s bureau-based score with current balance information. This helps organizations consider both the likelihood of recovery and the potential dollars at stake, while sensitive balance information remains within the organization’s working environment. Monitor accounts as they change The first decision about an account is rarely the last. Teams continually make choices about treatment, placement and resource allocation as accounts move through the recovery process. Recovery Scores is also available as a trigger. When underlying information changes, teams can receive an update and reconsider an account’s placement without waiting for the next portfolio-wide re-score. An account that shows lower recovery potential today may have a different recovery outlook later. Turn recovery potential into a portfolio strategy When portfolios contain more accounts than teams can work at once, the question isn’t simply, “How many accounts can we work?” It is, “Where can our resources have the greatest impact?” The latest Recovery Scores model helps organizations sharpen placement and treatment decisions. It gives debt buyers a way to price and segment portfolios with greater confidence and gives lenders another tool to direct limited collector time across their own post-charge-off portfolios. Learn more about Experian Recovery Scores

November 10, 2026 by Zohreen Ismail
What Is a Third-Party Breach? How to Prepare for and Respond to Vendor Incidents

Learn what a third-party breach is and steps to prepare, contain risk, and support affected customers. Read more!

November 9, 2026 by Laura Burrows
Mortgage Underwriting Moves from Modernization Talk to Action 

Mortgage underwriting is entering a new phase. In a recent conversation with HousingWire’s Allison LaForgia, Michele Bodda, Group President of Experian Housing, Verification Solutions, and Employer Services, discussed how modern credit scores, alternative data and verification tools are changing how lenders evaluate borrowers.  Lenders can now judge modernization by its results, Bodda said. “Now we’re actually letting more modern scores get into underwriting to help price loans and go all the way through to securitization,” she told HousingWire. “We’re letting the scores and the data actually speak for itself instead of just talking about it.”  The Right Data at the Right Time  Modernizing underwriting means providing useful information at the right stage, rather than giving lenders everything at once. “You don’t need everything all at once. You don’t need everything on initial pull,” Bodda said.  Alternative data, such as rental payments and buy now, pay later activity, can help show how consumers manage obligations, especially those with thinner credit files. A thin credit file does not necessarily mean someone has a thin financial life.  “It’s our responsibility as one of the primary data providers to make sure we can make all of that available, so that we’re best representing the consumer,” Bodda said. A fuller view of data may help lenders identify creditworthy applicants who might otherwise be difficult to assess.  Simplifying Verification and Reducing Friction  Bodda also shared how Experian is making credit information more easily accessible and reducing unnecessary costs during the originations process, explaining that new enhancements to Experian’s Power Profile Plus allow lenders to pull credit data at the start of underwriting and request another score later without repurchasing the data.  “You can pull it later and not pay for the credit data again,” Bodda said.   Experian is also investing in income and employment verification, including through a new partnership with Workday. Bodda explained that Experian will continue to focus on process improvement, competition and innovation across the mortgage ecosystem.  A Broader Path to Homeownership  As consumer expectations and underwriting capabilities evolve, borrowers want a process that reflects their financial lives, while lenders seek greater efficiency. Modern scores, relevant data, and streamlined verification can help lenders assess applications with more context—and may help more people pursue homeownership.  “If we as an industry can open this up and bring more people into the process, then we’re going to thrive,” Bodda said in the interview.   Watch the interview and hear all of Michele’s insights, and more here.  

November 6, 2026 by Caroline Basile

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe