In the UK, a small or medium enterprise is one with fewer than 250 staff. That covers the vast majority of businesses, and attackers know many of them have limited security resources.

1. Phishing and business email compromise

Still the most common way in. A convincing email leads to a stolen login, and from there attackers read inboxes, redirect invoices or launch further attacks.

2. Ransomware

Files are encrypted and often stolen first, then held to ransom. Recovery without good backups can take weeks.

3. Account takeover

Reused and weak passwords make it easy for attackers to walk straight in. Multi-factor authentication stops most of these attacks.

4. Supply chain attacks

Attackers compromise a supplier or software provider to reach their real target. It's one reason primes and larger customers increasingly ask suppliers for Cyber Essentials and DCC.

5. Insider mistakes

Not every incident is malicious. Misdirected emails, overshared files and lost devices cause real damage. Good access controls and training reduce the risk.

Want to know how exposed you are? Try our health check or talk to our team.