Research

SMEs are leaving themselves exposed to cyber attacks Aviva research shows

  • 86% of SMEs have no cyber cover despite increases in cyber fraud and breaches.
  • Up to 41%  of SMEs made digital changes to their business during the pandemic with 96% or more planning to keep their digital changes
  • Only 12% SMEs updated their cover to reflect the digital changes they had recently made
  • As few as 3% of SMEs in some UK regions have cyber cover 

The majority (86%) of British small to medium enterprises (SMEs) do not have any cyber insurance cover in place, research from UK insurer Aviva shows.1

EG Action Fraud reported a 400% increase in cyber-related fraud2 in March 2020 and 46% of businesses experienced a breach during 20203, yet many SMEs are leaving their livelihoods at risk by not selecting cyber insurance.

Aviva’s SME Pulse Survey found that this lack of insurance protection comes at a time of rapid digitisation. The survey showed that 41% of SMEs updated their website in response to the pandemic, and 39% moved online or improved their online offering. Nearly all (96% )of those who made a change confirmed that they would keep the changes. However, despite increasing their digital presence, only 11% updated their cyber cover at the time. 1

Only 14% of SMEs said they had any cyber cover, with significant regional variances. Just 3% of Scottish SMEs had cyber cover in place, compared to 32% in Northern Ireland1

UK Regions with specific cyber cover1

Northern Ireland

32%

Eastern England

23%

London

18%

Midlands

14%

Wales

12%

North

11%

South

10%

Scotland

3%

Alana Muir, Senior Cyber Underwriter at Aviva, said, “Customers will often have cover for ‘tangible’ risks like fire, flood and theft, but the impacts on a business of a cyber breach extend beyond the initial costs. They also result in loss of revenue and damage to both reputation and trust.

“The pandemic has accelerated digital adoption across all businesses, meaning cyber insurance has quickly moved from a perceived luxury to an absolute must-have."

“The pandemic has accelerated digital adoption across all businesses, meaning cyber insurance has quickly moved from a perceived luxury to an absolute must-have. Cyber cover doesn’t just protect businesses against an attack, but it also ensures they have fast access to expert specialists, so they can return to normal as quickly as possible in the event of a cyber incident.

“We know from our Aviva Risk Insights report that cyber-attacks are one of the biggest issues faced by SMES. This gives us a perfect storm where cyber attacks are increasing while businesses leave themselves exposed through lack of cover. So it is important that businesses make sure they are not just staying on top of their digital admin but they are also covered if they are one of the increasing number being targeted by online criminals.”

Top tips for business owners:

  • If you are unclear about your digital risk, contact your insurance broker to understand the risks to your business and what protection you may need.
  • Always use individual identification and passwords to access your computer equipment and change default or manufacturers passwords.
  • Back up all data every 7 days or less and store backups securely and away from the data or programs they relate to.
  • All personal and business data must be stored and disposed of in a secure manner. Remember the definition of ‘personal data’ includes information you hold on suppliers, business emails, and employee data.
  • Install any updates for firmware, operating systems, software, or programs within 14 days of release where the updates address a vulnerability described by provider as critical, important, or high.
  • Ensure that any equipment connected to the internet or other network is protected by a suitable firewall and ensure it is updated automatically or at intervals of a month or less.
-ENDS-

1 All data is taken from a survey of 505 British SMEs across the UK, in a wide variety of industry sectors, conducted by YouGov from 12 April – 24 April 2021 on behalf of Aviva.

2 Coronavirus-related fraud reports up 400% . Action Fraud press release 2020

3 2020 Cyber Security breaches Survey. DCMS 

Media Enquiries

Peter Thain

General Insurance & Broker

Notes to editors:

  • For information on how Aviva is helping our people, customers and communities impacted by COVID-19 visit: www.aviva.com/covid-19-our-response/
  • We exist to be with people when it really matters, throughout their lives. We have been taking care of people for more than 320 years, in line with our purpose of being ‘with you today, for a better tomorrow’. In 2020, we paid £30.6 billion in claims and benefits to our customers.
  • Aviva is invested in our people, our customers, our communities and our planet. In 2021, we announced our plan to become a Net Zero carbon emissions company by 2040, the first major insurance company in the world to do so. This plan means Net Zero carbon emissions from our investments by 2040; setting out a clear pathway to get there with a cut of 25% in the carbon intensity of our investments by 2025 and of 60% by 2030; and Net Zero carbon emissions from our own operations and supply chain by 2030. Aviva has been leading this agenda for decades: Aviva was the first international insurer to go operationally carbon neutral in 2006 and we are champions of renewable energy and energy storage at our offices, allowing us to achieve our 2030 carbon reduction target (70% reduction on 2010 levels) 10 years early. Find out more about our climate goals at www.aviva.com/climate-goals and our sustainability ambition at www.aviva.com/sustainability.
  • Aviva is a Living Wage and Living Hours employer and provides market-leading benefits for our people, including flexible working, paid carers leave and equal parental leave. Find out more at www.aviva.com/social-purpose
  • We are focused on the UK, Ireland and Canada where we have leading market positions and significant potential. We will invest for growth in these markets. We will also transform our performance and improve our efficiency. Our transformation will be underpinned by managing our balance sheet prudently, reducing debt and increasing our financial resilience. We also have strategic investments in Singapore, China and India.
  • At 30 June 2021, total Group assets under management at Aviva Group are £522 billion and our Solvency II shareholder capital surplus is £12 billion. Our shares are listed on the London Stock Exchange and we are a member of the FTSE 100 index.
  • For more details on what we do, our business and how we help our customers, visit www.aviva.com/about-us
  • The Aviva newsroom at www.aviva.com/newsroom includes links to our spokespeople images, podcasts, research reports and our news release archive. Sign up to get the latest news from Aviva by email.You can follow us on:
  • Twitter: www.twitter.com/avivaplc/
  • LinkedIn: www.linkedin.com/company/aviva-plc
  • Instagram: www.instagram.com/avivaplc
  • For the latest corporate films from around our business, subscribe to our YouTube channel: www.youtube.com/user/aviva

      More from our Newsroom