---
title: "This Year’s Biggest Data Breaches: What SMBs Need to Learn"
description: Learn from major data breaches in 2024 and discover essential cybersecurity measures to protect your small or medium-sized business from cyber threats.
---

[Securafy | Knowledge Hub ](https://blog.securafy.com)

# [This Year’s Biggest Data Breaches: What SMBs Need to Learn](https://blog.securafy.com/this-years-biggest-data-breaches-what-smbs-need-to-learn)

 Written by [Randy Hall](https://blog.securafy.com/author/randyhall) | Dec 3, 2024 8:46:41 AM

At Securafy, we talk about cybersecurity all the time—in our emails, on social media, and as part of our key services. Yet, we still wonder: why aren’t small and medium-sized businesses (SMBs) paying closer attention to this critical issue?

Is it limited cybersecurity awareness? Or is it a lack of understanding about the risks businesses face?

The data paints a concerning picture. A [**study by NinjaOne**](https://www.ninjaone.com/blog/smb-cybersecurity-statistics/) revealed that **93% of company networks can be penetrated by cybercriminals**, highlighting the widespread vulnerability businesses face. Despite this, **36% of small businesses** are **not concerned about cyberattacks,** often believing they are too small to be targeted ([**BNC Systems**](https://www.bncsystems.com/blog/cybersecurity-statistics-every-smb-owner-should-know/)).

 

Let’s explore some of the most damaging breaches this year and what SMBs can learn from them.

### 1. National Public Data (2 Billion-Plus Records)

**What happened:** In December 2023, hackers accessed the systems of National Public Data, a background-check company. By April 2024, 2.7 billion sensitive records were leaked onto the dark web.

**Who is exposed:** Individuals across the US, Canada, and the UK.

**Compromised data:** Names, past and current addresses, Social Security numbers, dates of birth, and phone numbers.

### 2. Change Healthcare (38 Million Records)

**What happened:** In February, a Russian ransomware gang breached Change Healthcare, exploiting systems without multifactor authentication. This attack caused downtime across healthcare institutions, compromising patient data and forcing UnitedHealth to pay $22 million to prevent leaks.

**Who is exposed:** An estimated one-third of Americans.

**Compromised data:** Payment information, Social Security numbers, and sensitive medical data.

### 3. AT&T (Hacked Twice)

**What happened:** Hackers stole data from 73 million AT&T customers in March. By July, another breach targeted AT&T’s account with data giant Snowflake, affecting millions more.

**Who is exposed:** Over 110 million customers.

**Compromised data:** Personal information, such as Social Security numbers and phone numbers.

### 4. Synnovis (300 Million Patient Interactions)

**What happened:** In June, Synnovis, a UK pathology lab, was attacked by a ransomware gang, resulting in widespread outages across London healthcare institutions.

**Who is exposed:** Past and current patients, with data going back years.

**Compromised data:** Patient interactions, including blood test results for HIV and cancer.

### 5. Snowflake (600 Million-Plus Records)

**What happened:** In May, cloud data giant Snowflake suffered a breach through stolen employee credentials. Millions of customer records from companies like Ticketmaster and Advance Auto Parts were stolen.

**Who is exposed:** Millions of customers across 165 corporations.

**Compromised data:** Customer records.

## Why This Matters to SMBs

These high-profile breaches should serve as a wake-up call for SMBs. Cybersecurity isn’t just a concern for large enterprises—it’s a pressing issue for businesses of all sizes.

In fact, **61% of SMBs were targeted by cyberattacks in 2021,** with **18% involving malware** ([**StrongDM**](https://www.strongdm.com/blog/small-business-cyber-security-statistics)). Despite this, only **17% of SMBs** consider their cybersecurity capabilities effective ([**Cyber Readiness Institute**](https://cyberreadinessinstitute.org/news-and-events/small-and-medium-sized-businesses-face-major-obstacles-in-achieving-cyber-readiness-the-state-of-smb-cyber-readiness-2024/)).

Many SMBs underestimate their risks because they think they’re too small to be targeted. However, the **financial constraints** many SMBs face—**47% of businesses with fewer than 50 employees lack a cybersecurity budget** (**BNC Systems**)—make them even more attractive to cybercriminals.

Additionally, **24% of U.S. healthcare employees** have not received cybersecurity training, showing a broader lack of preparedness ([**Packetlabs**](https://www.packetlabs.net/posts/123-smb-cybersecurity-statistics/)).

## How SMBs Can Protect Themselves

While you can’t control whether companies you work with get hacked, there are steps you can take to protect your business and personal data:

1. **Review health-related communications:** Monitor statements for unfamiliar services and report suspicious activity immediately.
2. **Freeze your credit:** Prevent hackers from opening credit accounts in your name.
3. **Update credentials:** Change passwords for compromised accounts and set up alerts for unusual activity.
4. **Beware of phishing emails:** Hackers often send convincing but fraudulent emails. Verify requests before clicking on anything.

At Securafy, we focus on helping SMBs take proactive steps to stay secure. From **cybersecurity assessments** to **network penetration testing**, our solutions are designed to close gaps before they become problems.

## Data Leaks Hit New Heights

The question isn’t if your business will be targeted, but when. With **87% of small businesses holding sensitive customer data** that could be compromised in a breach (**BNC Systems**), staying proactive is essential.

Don’t wait for a breach to happen—schedule a **free cybersecurity assessment** today and ensure your business is protected.

<https://blog.securafy.com/hs/cta/wi/redirect?encryptedPayload=AVxigLJvAZhIxFVpURqiYFvffhPtfACCvDnBkGFx6G35t7B7BykkLn6ZTov0e4h2ACrvyj71vB6iwV%2BUlmw386d6yBCFyAEbX9ncCq24vF3shRUAptE15dgQfayJE1EVTItZ68GQN3ma6MeW6JabNETJD4Jv1OsSTz%2FCwexflW6zcJEUeKVa2e4DJooXx0f7YMQP&webInteractiveContentId=182016326765&portalId=46124718>

[View full post](https://blog.securafy.com/this-years-biggest-data-breaches-what-smbs-need-to-learn)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Randy Hall"
  },
  "dateModified" : "2024-12-03T08:47:40.979Z",
  "datePublished" : "2024-12-03T08:46:41Z",
  "headline" : "This Year’s Biggest Data Breaches: What SMBs Need to Learn",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1024,
    "url" : "https://46124718.fs1.hubspotusercontent-na1.net/hubfs/46124718/AI-Generated%20Media/Images/This%20Year%E2%80%99s%20Biggest%20Data%20Breaches.jpeg",
    "width" : 1024
  },
  "mainEntityOfPage" : "https://blog.securafy.com/this-years-biggest-data-breaches-what-smbs-need-to-learn",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Knowledge Hub"
  }
}
```