Attackers Target

Both Large and

Small Businesses
Like thrown paint on a blank
canvas, attacks against
businesses, both large and small,
appear indiscriminate.
If there is profit to be made,
attackers strike at will.
The last five years have shown a
steady increase in attacks targeting
businesses with less than 250 employees.

Number of Employees

Large Enterprises 2,500+

Medium-Size Businesses 251 to 2,500
Small Businesses (SMBs) 1 to 250

Spear-Phishing Attacks
by Size of Targeted Organization

2011

2012

2013

2014

2015

50

39%

41

35%

19%
31%

31

25

22%

30

34

43%

100%

50

32
18%
%

Cyber attackers are playing the long game against

large companies, but all businesses of all sizes are
vulnerable to targeted attacks. In fact, the number of
spear-phishing campaigns targeting employees
increased 55% in 2015.

2013

2014

2015

779

841

1,305

+91%

+8%

+55%

%
%

2015
Attacks
per Org

Risk Ratio of Spear-Phishing Attacks

by Organization Size

3.6

2.2

2.1

Risk Ratio
as %

38%

15%

3%

Risk Ratio

1 in 2.7

1 in 6.8

1 in 40.5