{"id":77808,"date":"2025-11-26T08:53:09","date_gmt":"2025-11-26T16:53:09","guid":{"rendered":"https:\/\/dhblog.dream.press\/blog\/?p=77808"},"modified":"2026-08-19T06:27:10","modified_gmt":"2026-08-19T13:27:10","slug":"small-business-ransomware-study","status":"publish","type":"post","link":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/","title":{"rendered":"[STUDY] 12% of Small Businesses Say They\u2019ve Paid a Ransom Demand"},"content":{"rendered":"<div class=\"tldr-block\" style=\"display: none;\">\n\t<div class=\"svg\">\n\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 119.25 37.8\">\n\t<g>\n\t\t<g>\n\t\t\t<path fill=\"#ffffff\" d=\"M23.4,6.93h-8.1v24.57h-7.2V6.93H0V0h23.4v6.93Z\" \/>\n\t\t\t<path fill=\"#ffffff\" d=\"M45,24.57v6.93h-18.45V0h7.2v24.57h11.25Z\" \/>\n\t\t\t<path fill=\"#ffffff\"\n\t\t\t\td=\"M90.9,15.75c0,8.91-6.61,15.75-15.3,15.75h-12.6V0h12.6c8.68,0,15.3,6.84,15.3,15.75ZM83.97,15.75c0-5.4-3.42-8.82-8.37-8.82h-5.4v17.64h5.4c4.95,0,8.37-3.42,8.37-8.82Z\" \/>\n\t\t\t<path fill=\"#ffffff\"\n\t\t\t\td=\"M105.57,21.15h-3.42v10.35h-7.2V0h12.6c5.98,0,10.8,4.81,10.8,10.8,0,3.87-2.34,7.38-5.81,9.13l6.71,11.56h-7.74l-5.94-10.35ZM102.15,14.85h5.4c1.98,0,3.6-1.75,3.6-4.05s-1.62-4.05-3.6-4.05h-5.4v8.1Z\" \/>\n\t\t<\/g>\n\t\t<path\n\t\t\tfill=\"#0173ec\"\n\t\t\td=\"M53.97,37.8h-5.4l1.8-13.27h7.2l-3.6,13.27ZM49.02,12.55c0-2.34,1.93-4.27,4.27-4.27s4.27,1.94,4.27,4.27-1.93,4.27-4.27,4.27-4.27-1.94-4.27-4.27Z\"\n\t\t \/>\n\t<\/g>\n<\/svg>\n\t<\/div>\n\t<div class=\"tldr-wrap\">\n\t\t\n\n<p class=\"wp-block-paragraph\"><strong>In DreamHost\u2019s October 2025 survey of 1,000 U.S. small business owners and managers, 12% said they\u2019ve received a ransom demand related to their website, email, or data \u2014 and paid it.<\/strong> 46% have already been hit by a cyberattack, and 24% have never tested whether their backups actually work. The fix doesn\u2019t have to be complex: a backup you\u2019ve tested before you need it can reduce an attacker\u2019s leverage by giving you a recovery option.<\/p>\n\n\n\t<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>Key findings at a glance<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><ul><li>12% of respondents have received a ransom demand related to their website, email or data \u2014 and paid it.<\/li><li>42% are very concerned about ransomware attacks targeting websites.<\/li><li>46% have experienced a cyberattack.<\/li><li>38% say their website has been hacked or infected with malware.<\/li><li>24% say they have never tested their backup and restore process to ensure it actually works.<\/li><li>40.5% said automated website backups would be the investment they\u2019d be most likely to make to avoid paying a ransom.<\/li><\/ul><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We surveyed 1,000 owners and managers of small businesses (50 or fewer employees) nationwide about website security. <strong>What we found: 12% have received a ransom demand related to their website, email, or data \u2014 and <\/strong><strong><em>paid<\/em><\/strong><strong> it<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Why does this matter?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Small businesses are squarely in attackers\u2019 sights. Verizon\u2019s 2025 Data Breach Investigations Report found ransomware present in <a href=\"https:\/\/www.infosecurity-magazine.com\/news\/verizon-dbir-smb-ransomware-attacks\/\">88% of breaches at small and midsize businesses<\/a>, compared to 39% at larger organizations. Our findings show what that looks like on the ground for everyday business owners, not just large enterprises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a web hosting provider that serves thousands of small businesses, DreamHost wanted to understand the real-world impact of these threats and how prepared businesses are to respond. The results point to clear gaps \u2014 and actionable solutions \u2014 in small business cybersecurity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Picture a room of a hundred people who run websites: freelancers, store operators, small business owners; folks who just want their site to work. Now count off twelve of them.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1449\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp\" alt=\"Grid of small business icons with 12 red ones highlighted to show the percentage\" class=\"wp-image-77818 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-300x272.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-1024x927.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-768x696.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-1536x1391.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-600x543.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-1200x1087.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-730x661.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-1460x1322.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-784x710.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-1568x1420.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/01_12_of_small_businesses_say_they_ve_paid_a_ransom_demand-877x794.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1449;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Twelve out of every 100 have received a ransom demand tied to their website, email, or data \u2014 and paid it. When a cyberattack takes a website offline, the disruption is immediate: inaccessible admin panels, unfulfilled orders, and locked customer data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For many, paying looks like the fastest way back online. It often isn\u2019t. In a Ponemon Institute report cited by <a href=\"https:\/\/purplesec.us\/learn\/average-cost-of-ransomware-attacks\/\">PurpleSec<\/a>, only 13% of businesses that chose to pay a ransom received all of their data back.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The concern extends beyond those who have paid. 42% of respondents reported being \u201cvery concerned\u201d about ransomware attacks targeting websites, reflecting widespread awareness of the threat.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The full survey data reveals why that concern is justified \u2014 and what businesses can do about it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s get into it.&nbsp;<\/p>\n\n\n\n<h2 id=\"h-1-in-8-americans-have-paid-a-ransom\" class=\"wp-block-heading\">1 in 8 small business owners have paid a ransom<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1211\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid.webp\" alt=\"Breakdown of responses to ransom-related demands with percentages for paid, didn\u2019t pay, never\" class=\"wp-image-77819 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-300x227.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-1024x775.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-768x581.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-1536x1163.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-600x454.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-1200x908.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-730x553.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-1460x1105.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-784x593.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-1568x1187.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/02_when_asked_if_they_d_received_demands_related_to_their_website_email_or_data_11_8_yes_and_paid-877x664.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1211;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">That 12% represents businesses forced to decide how to contain the incident, restore operations, and respond to the demand.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ransomware attacks are not limited to large enterprises. Small businesses with accessible online infrastructure face the same threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A closer look at those who received ransom demands reveals the role preparedness plays in decision-making.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Of the 28.4% who faced a demand, <strong>41.5% paid the ransom.<\/strong> When facing that moment \u2014 site down, data locked, revenue frozen \u2014 nearly half choose to pay.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1256\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom.webp\" alt=\"Of those who received ransom demands 41 5 paid the ransom\" class=\"wp-image-77820 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-300x236.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-1024x804.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-768x603.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-1536x1206.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-600x471.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-1200x942.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-730x573.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-1460x1146.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-784x615.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-1568x1231.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/03_of_those_who_received_ransom_demands_41_5_paid_the_ransom-877x688.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1256;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">On the flip side: <strong>58.5% refused<\/strong>. That\u2019s nearly 6 in 10 businesses that declined to pay. And refusal is becoming the norm beyond our sample, too: per Verizon\u2019s 2025 DBIR, <a href=\"https:\/\/www.infosecurity-magazine.com\/news\/verizon-dbir-smb-ransomware-attacks\/\">64% of ransomware victims now refuse to pay<\/a>, up from 50% two years earlier.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our survey didn\u2019t ask each business why it refused, but the math of refusal is simple: saying no is far easier when you have a clean, tested backup and a fast way to restore it. Without one, the attacker holds all the leverage.<\/p>\n\n\n\n<h2 id=\"h-nearly-half-of-americans-are-deeply-worried-about-ransomware-threats-nbsp\" class=\"wp-block-heading\">Nearly half of small business owners are deeply worried about ransomware<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">42% of respondents in our survey said they\u2019re \u201cvery concerned\u201d about the rising threat of ransomware attacks targeting websites. Add in those who are \u201csomewhat concerned,\u201d and 84.6% of respondents see ransomware as a legitimate threat.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The website <em>is<\/em> the business \u2014 the storefront, the pipeline, the hub. Disruption to access can directly impact business operations.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1396\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_.webp\" alt=\"Pie chart showing concern levels about ransomware attacks: 42.2% very concerned\" class=\"wp-image-77821 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-300x262.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-1024x893.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-768x670.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-1536x1340.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-600x524.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-1200x1047.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-730x637.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-1460x1274.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-784x684.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-1568x1368.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/04_how_concerned_are_you_about_ransomware_attacks_targeting_websites_-877x765.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1396;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This apprehension reflects a broader shift: ransomware has expanded beyond large enterprises to target small businesses.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">High-profile breaches illustrate the scope of the threat.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Take AT&amp;T. After a breach affecting 73 million current and former account holders \u2014 whose information, including Social Security numbers and birth dates, was found in a dataset on the dark web \u2014 the company reached a <a href=\"https:\/\/www.cbsnews.com\/news\/att-data-breach-settlement-kroll-7500-how-to-file-claim\/\">$177 million class-action settlement<\/a> in 2025 covering that incident and a second 2024 breach.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If organizations with dedicated security teams experience breaches of this scale, small businesses face similar vulnerabilities without comparable resources for <a href=\"https:\/\/www.dreamhost.com\/features\/security\/\">proactive protection<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The writing\u2019s on the wall: neglect<em> <\/em>invites exposure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our survey data shows that many business owners recognize common security weaknesses: <a href=\"https:\/\/www.dreamhost.com\/blog\/abandoned-plugins\/\">outdated plugins<\/a>, weak passwords, and neglected CMS updates. Recognizing the weak spots is the first step. Fixing them is the part too many skip.<\/p>\n\n\n\n<div class=\"article-newsletter article-newsletter--gradient\">\n\n\n<h2>Get Content Delivered Straight to Your Inbox<\/h2><p>Subscribe now to receive all the latest updates, delivered directly to your inbox.<\/p><form class=\"nwsl-form\" id=\"newsletter_block_\" novalidate><div class=\"messages\"><\/div><div class=\"form-group\"><label for=\"input_newsletter_block_\"><input type=\"email\"name=\"email\"id=\"input_newsletter_block_\"placeholder=\"Enter your email address\"novalidatedisabled=\"disabled\"\/><\/label><button type=\"submit\"class=\"btn btn--brand\"disabled=\"disabled\"><span>Sign Me Up!<\/span><svg width=\"21\" height=\"14\" viewBox=\"0 0 21 14\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8523 0.42524L12.9323 1.34521C12.7095 1.56801 12.7132 1.9304 12.9404 2.14865L16.7241 5.7823H0.5625C0.251859 5.7823 0 6.03416 0 6.3448V7.6573C0 7.96794 0.251859 8.2198 0.5625 8.2198H16.7241L12.9405 11.8535C12.7132 12.0717 12.7095 12.4341 12.9323 12.6569L13.8523 13.5769C14.072 13.7965 14.4281 13.7965 14.6478 13.5769L20.8259 7.39879C21.0456 7.17913 21.0456 6.82298 20.8259 6.60327L14.6477 0.42524C14.4281 0.205584 14.0719 0.205584 13.8523 0.42524Z\" fill=\"white\"\/>\n<\/svg>\n<\/button><\/div><\/form><\/div>\n\n\n<h2 id=\"h-nearly-half-of-businesses-have-already-been-hacked\" class=\"wp-block-heading\">Nearly half of businesses have experienced a cyberattack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">That widespread concern isn\u2019t unfounded. 46% of our respondents have already experienced a cyberattack, resulting in exposed data, encrypted files, or complete site shutdowns.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1215\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations.webp\" alt=\"Graphic showing 45.9% of SMB websites have been hit by a cyberattack and 54.1% have not.\" class=\"wp-image-77822 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-300x228.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-1024x778.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-768x583.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-1536x1166.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-600x456.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-1200x911.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-730x554.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-1460x1109.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-784x595.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-1568x1191.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/05_nearly_half_of_smb_websites_have_been_hit_by_a_cyberattack_that_exposed_data_or_disrupted_operations-877x666.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1215;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Separately, 38% of respondents reported that their website had been hacked or infected with malware.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Compromised logins<\/li>\n\n\n\n<li>Infected plugins<\/li>\n\n\n\n<li>SEO spam redirects<\/li>\n\n\n\n<li>Suspended domains<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Each can mean lost revenue from downtime, damaged search rankings, and eroded customer trust \u2014 problems that compound quickly for small businesses operating on thin margins.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1041\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection.webp\" alt=\"4 in 10 americans have experienced a website hack or malware infection\" class=\"wp-image-77823 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-300x195.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-1024x666.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-768x500.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-1536x999.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-600x390.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-1200x781.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-730x475.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-1460x950.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-784x510.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-1568x1020.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/06_4_in_10_americans_have_experienced_a_website_hack_or_malware_infection-877x571.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1041;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.dreamhost.com\/blog\/this-site-contains-malware-warning\/\">Malware infections<\/a>, in particular, can spread quickly through outdated plugins and themes, and for 14% of those who\u2019ve been hacked, it\u2019s not a one-time event \u2014 they\u2019ve experienced multiple attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Treat your web host\u2019s built-in security as a foundation, not a full defense. Prevention is still your job: install updates, run security audits, and replace <a href=\"https:\/\/www.dreamhost.com\/blog\/secure-your-wordpress-website\/\">weak credentials<\/a>. And if you\u2019d rather not hunt for malware yourself, DreamHost\u2019s <a href=\"https:\/\/www.dreamhost.com\/products\/dreamshield\/\">DreamShield<\/a> add-on scans a DreamHost-hosted site daily, blocks the malware it detects, and alerts you when something\u2019s wrong.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Yet many website owners still approach cybersecurity reactively rather than proactively \u2014 operating with the same vulnerabilities that got them breached in the first place.<\/p>\n\n\n\n<h2 id=\"h-1-in-4-americans-never-test-their-website-backups\" class=\"wp-block-heading\">1 in 4 small businesses never test their website backups<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"708\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work.webp\" alt=\"One in four Americans haven\u2019t tested whether their backups work\" class=\"wp-image-77824 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-300x133.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-1024x453.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-768x340.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-1536x680.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-600x266.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-1200x531.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-730x323.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-1460x646.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-784x347.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-1568x694.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/07_1_in_4_americans_admit_they_ve_never_tested_if_their_backups_actually_work-877x388.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/708;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Even after being hacked or seeing peers experience data loss, many businesses still haven\u2019t verified that their website backups actually work. Nearly one in four respondents (24%) reported they\u2019ve never tested their backup and restore process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That gap between having a plan and having a plan that works is where minor crises become major business disruptions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Many owners assume \u201cauto-backup\u201d means \u201cauto-recovery.\u201d&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It doesn\u2019t.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Backups can fail silently or become corrupted, and the worst time to find that out is mid-crisis. <a href=\"https:\/\/www.cisa.gov\/stopransomware\/ransomware-faqs\">CISA\u2019s baseline advice<\/a> applies to businesses of every size: back up data regularly, keep it on a separate device, and store it offline. Then test a restore while nothing is on fire \u2014 DreamHost\u2019s web hosting plans include daily automated backups, and DreamPress adds <a href=\"https:\/\/www.dreamhost.com\/features\/wordpress-backups\/\">on-demand backups and one-click restores<\/a>, so a dry run is a small job instead of a rescue mission.<\/p>\n\n\n\n<h2 id=\"h-40-of-americans-would-pay-for-backups-to-avoid-paying-hackers\" class=\"wp-block-heading\">40% would pay for backups to avoid paying hackers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There is a positive trend in the data: 40% of respondents said they\u2019d be most likely to invest in <a href=\"https:\/\/www.dreamhost.com\/blog\/how-to-back-up-wordpress-tutorial\/\">automated website backups<\/a> if it meant they could avoid paying a ransom.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1593\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_.webp\" alt=\"Bar chart showing reasons to invest in automated website backups, led by avoiding ransom at 40.5%\" class=\"wp-image-77825 lazyload\" data-srcset=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_.webp 1600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-300x300.webp 300w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-1024x1020.webp 1024w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-150x150.webp 150w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-768x765.webp 768w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-1536x1529.webp 1536w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-600x597.webp 600w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-1200x1195.webp 1200w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-730x727.webp 730w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-1460x1454.webp 1460w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-784x781.webp 784w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-1568x1561.webp 1568w, https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/08_what_would_make_you_most_likely_to_invest_in_automated_website_backups_-877x873.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1593;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This represents a shift toward prevention as a financial decision. Nearly a quarter of respondents cited cost or complexity as the barrier keeping them from backup solutions. The numbers say that barrier is worth clearing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4.6% said they\u2019d never invest in backups at all. These businesses remain vulnerable to ransomware attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to PurpleSec, small businesses impacted by a data breach can expect to pay <a href=\"https:\/\/purplesec.us\/learn\/average-cost-of-ransomware-attacks\/\">$120,000 to $1.24 million<\/a> to respond and recover.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A clean, tested backup can shorten recovery and reduce pressure to pay. Keep backups separate and offline, test the restore process, and treat backups as one part of a broader security and incident-response plan.<\/p>\n\n\n\n<h2 id=\"h-summary-nbsp\" class=\"wp-block-heading\">Summary&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nearly half of small businesses have already experienced a cyberattack, and awareness is high: <strong>84.6% of our respondents see ransomware as a legitimate threat.<\/strong> The next step is treating cybersecurity as continuity planning, not just a technical cost.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The path forward is clear. Resilience is built with disciplined preparation: rigorously tested backups, tools that automate defense, and a commitment to digital preparedness.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Quick response and tested recovery capabilities are important parts of a layered ransomware defense.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Businesses that prepare in advance keep the decision in their own hands: restore, don\u2019t pay.<\/p>\n\n\n\n<h2 id=\"h-small-business-ransomware-faqs\" class=\"wp-block-heading\">Small business ransomware statistics: FAQs<\/h2>\n\n\n\n<h3 id=\"h-how-many-small-businesses-have-paid-a-ransom\" class=\"wp-block-heading\">How many small businesses have paid a ransom?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In DreamHost\u2019s October 2025 survey of 1,000 U.S. small business owners and managers, 12% said they\u2019d received a ransom demand related to their website, email, or data \u2014 and paid it. Among just those who received a demand, 41.5% paid.<\/p>\n\n\n\n<h3 id=\"h-what-percentage-of-small-business-breaches-involve-ransomware\" class=\"wp-block-heading\">What percentage of small business breaches involve ransomware?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Verizon\u2019s 2025 Data Breach Investigations Report found ransomware present in <a href=\"https:\/\/www.infosecurity-magazine.com\/news\/verizon-dbir-smb-ransomware-attacks\/\">88% of breaches at small and midsize businesses<\/a>, compared to 39% at larger organizations.<\/p>\n\n\n\n<h3 id=\"h-what-is-the-average-ransomware-demand\" class=\"wp-block-heading\">What is the average ransomware demand?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/purplesec.us\/learn\/average-cost-of-ransomware-attacks\/\">PurpleSec\u2019s 2025 roundup<\/a> puts the average ransom demand in 2024 at $5.2 million. What victims actually hand over is far smaller: Verizon\u2019s 2025 DBIR reported median ransom payments fell to $115,000, down from $150,000 the year before.<\/p>\n\n\n\n<h3 id=\"h-should-a-small-business-pay-the-ransom\" class=\"wp-block-heading\">Should a small business pay the ransom?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We recommend against it. <a href=\"https:\/\/www.cisa.gov\/stopransomware\/ransomware-faqs\">CISA notes<\/a> there\u2019s no guarantee you\u2019ll recover your files even if you pay, and in a Ponemon Institute report cited by PurpleSec, only 13% of businesses that chose to pay received all of their data back. A tested backup lets you restore instead of negotiate.<\/p>\n\n\n\n<h3 id=\"h-how-much-does-recovering-from-a-breach-cost-a-small-business\" class=\"wp-block-heading\">How much does recovering from a breach cost a small business?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">According to PurpleSec, small businesses impacted by a data breach can expect to pay $120,000 to $1.24 million to respond and recover.<\/p>\n\n\n\n<h2 id=\"h-methodology\" class=\"wp-block-heading\">Methodology<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This article is based on a nationwide survey conducted in October 2025, in which we collected responses from 1,000 Americans to better understand their experiences and concerns related to website security and cyber threats. The survey specifically targeted individuals who own or manage businesses with 50 or fewer employees, ensuring the data reflects the unique challenges and realities faced by small business operators.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Participants represented a diverse cross-section of industries and professional backgrounds, offering a well-rounded snapshot of public sentiment and real-world impacts. Respondents were asked a series of questions about ransomware, website breaches, data protection practices, and incident response, providing valuable insights into the current state of cybersecurity awareness and preparedness among small business owners in the U.S.<\/p>\n\n\n\n<h2 id=\"h-fair-use\" class=\"wp-block-heading\">Fair Use<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Users are welcome to use the insights and findings from this study for non-commercial purposes, such as academic research, educational presentations, and personal reference. When referencing or citing this article, please ensure proper attribution to maintain the integrity of the research. Direct linking to this article is permissible, and access to the original source of information is encouraged.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For commercial use or publication purposes \u2014 including but not limited to media outlets, websites, and promotional materials \u2014 please <a href=\"https:\/\/www.dreamhost.com\/downloads\/dreamhost-press-kit.pdf\">contact our Corporate Communications team<\/a> for permission and licensing details.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We appreciate your respect for intellectual property rights and adherence to ethical citation practices. Thank you for your interest in our research.<\/p>\n\n\n\n<div class=\"article-newsletter article-newsletter--gradient\">\n\n\n<h2>Get Content Delivered Straight to Your Inbox<\/h2><p>Subscribe now to receive all the latest updates, delivered directly to your inbox.<\/p><form class=\"nwsl-form\" id=\"newsletter_block_\" novalidate><div class=\"messages\"><\/div><div class=\"form-group\"><label for=\"input_newsletter_block_\"><input type=\"email\"name=\"email\"id=\"input_newsletter_block_\"placeholder=\"Enter your email address\"novalidatedisabled=\"disabled\"\/><\/label><button type=\"submit\"class=\"btn btn--brand\"disabled=\"disabled\"><span>Sign Me Up!<\/span><svg width=\"21\" height=\"14\" viewBox=\"0 0 21 14\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8523 0.42524L12.9323 1.34521C12.7095 1.56801 12.7132 1.9304 12.9404 2.14865L16.7241 5.7823H0.5625C0.251859 5.7823 0 6.03416 0 6.3448V7.6573C0 7.96794 0.251859 8.2198 0.5625 8.2198H16.7241L12.9405 11.8535C12.7132 12.0717 12.7095 12.4341 12.9323 12.6569L13.8523 13.5769C14.072 13.7965 14.4281 13.7965 14.6478 13.5769L20.8259 7.39879C21.0456 7.17913 21.0456 6.82298 20.8259 6.60327L14.6477 0.42524C14.4281 0.205584 14.0719 0.205584 13.8523 0.42524Z\" fill=\"white\"\/>\n<\/svg>\n<\/button><\/div><\/form><\/div>","protected":false},"excerpt":{"rendered":"<p>Key findings at a glance 12% of respondents have received a ransom demand related to their website, email or data \u2014 and paid it. 42% are very concerned about ransomware attacks targeting websites. 46% have experienced a cyberattack. 38% say their website has been hacked or infected with malware. 24% say they have never tested [&hellip;]<\/p>\n","protected":false},"author":964,"featured_media":77826,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_opengraph-title":"Small Business Ransomware Statistics 2025 - DreamHost","_yoast_wpseo_opengraph-description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","_yoast_wpseo_twitter-title":"Small Business Ransomware Statistics 2025 - DreamHost","_yoast_wpseo_twitter-description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","toc_headlines":"[[\"h-1-in-8-americans-have-paid-a-ransom\",\"1 in 8 small business owners have paid a ransom\"],[\"h-nearly-half-of-americans-are-deeply-worried-about-ransomware-threats-nbsp\",\"Nearly half of small business owners are deeply worried about ransomware\"],[\"h-nearly-half-of-businesses-have-already-been-hacked\",\"Nearly half of businesses have experienced a cyberattack\"],[\"h-1-in-4-americans-never-test-their-website-backups\",\"1 in 4 small businesses never test their website backups\"],[\"h-40-of-americans-would-pay-for-backups-to-avoid-paying-hackers\",\"40% would pay for backups to avoid paying hackers\"],[\"h-summary-nbsp\",\"Summary&nbsp;\"],[\"h-small-business-ransomware-faqs\",\"Small business ransomware statistics: FAQs\"],[\"h-methodology\",\"Methodology\"],[\"h-fair-use\",\"Fair Use\"]]","hide_toc":false,"show_updated_at":"1","footnotes":""},"categories":[10025],"tags":[],"class_list":["post-77808","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-talk"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Small Business Ransomware Statistics 2025 - DreamHost<\/title>\n<meta name=\"description\" content=\"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Small Business Ransomware Statistics 2025 - DreamHost\" \/>\n<meta property=\"og:description\" content=\"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/\" \/>\n<meta property=\"og:site_name\" content=\"DreamHost Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DreamHost\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-26T16:53:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-19T13:27:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1460\" \/>\n\t<meta property=\"og:image:height\" content=\"1095\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Brett D.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Small Business Ransomware Statistics 2025 - DreamHost\" \/>\n<meta name=\"twitter:description\" content=\"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/tremendousvalue\" \/>\n<meta name=\"twitter:site\" content=\"@dreamhost\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brett D.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Small Business Ransomware Statistics 2025 - DreamHost","description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/","og_locale":"en_US","og_type":"article","og_title":"Small Business Ransomware Statistics 2025 - DreamHost","og_description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","og_url":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/","og_site_name":"DreamHost Blog","article_publisher":"https:\/\/www.facebook.com\/DreamHost\/","article_published_time":"2025-11-26T16:53:09+00:00","article_modified_time":"2026-08-19T13:27:10+00:00","og_image":[{"width":1460,"height":1095,"url":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp","type":"image\/webp"}],"author":"Brett D.","twitter_card":"summary_large_image","twitter_title":"Small Business Ransomware Statistics 2025 - DreamHost","twitter_description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","twitter_creator":"@https:\/\/twitter.com\/tremendousvalue","twitter_site":"@dreamhost","twitter_misc":{"Written by":"Brett D.","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#article","isPartOf":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/"},"author":{"name":"Brett D.","@id":"https:\/\/www.dreamhost.com\/blog\/#\/schema\/person\/92e21736edd946a6d4455846c757d717"},"headline":"[STUDY] 12% of Small Businesses Say They\u2019ve Paid a Ransom Demand","datePublished":"2025-11-26T16:53:09+00:00","dateModified":"2026-08-19T13:27:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/"},"wordCount":1845,"publisher":{"@id":"https:\/\/www.dreamhost.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp","articleSection":["Tech Talk"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/","url":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/","name":"Small Business Ransomware Statistics 2025 - DreamHost","isPartOf":{"@id":"https:\/\/www.dreamhost.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#primaryimage"},"image":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp","datePublished":"2025-11-26T16:53:09+00:00","dateModified":"2026-08-19T13:27:10+00:00","description":"Small business ransomware statistics: DreamHost\u2019s October 2025 survey of 1,000 U.S. owners found 12% paid a ransom demand and 46% suffered an attack.","breadcrumb":{"@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#primaryimage","url":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp","contentUrl":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/11\/1460x1095_blog_hero_12_of_small_businesses_say_they_ve_paid_a_ransom_demand.webp","width":1460,"height":1095,"caption":"[STUDY] 12% of Small Businesses Say They\u2019ve Paid a Ransom Demand"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dreamhost.com\/blog\/small-business-ransomware-study\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dreamhost.com\/blog\/"},{"@type":"ListItem","position":2,"name":"[STUDY] 12% of Small Businesses Say They\u2019ve Paid a Ransom Demand"}]},{"@type":"WebSite","@id":"https:\/\/www.dreamhost.com\/blog\/#website","url":"https:\/\/www.dreamhost.com\/blog\/","name":"DreamHost Blog","description":"","publisher":{"@id":"https:\/\/www.dreamhost.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dreamhost.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.dreamhost.com\/blog\/#organization","name":"DreamHost","url":"https:\/\/www.dreamhost.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dreamhost.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/dhblog.dream.press\/blog\/wp-content\/uploads\/2019\/01\/dh_logo-blue-2.png","contentUrl":"https:\/\/dhblog.dream.press\/blog\/wp-content\/uploads\/2019\/01\/dh_logo-blue-2.png","width":1200,"height":168,"caption":"DreamHost"},"image":{"@id":"https:\/\/www.dreamhost.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DreamHost\/","https:\/\/x.com\/dreamhost","https:\/\/www.instagram.com\/dreamhost\/","https:\/\/www.linkedin.com\/company\/dreamhost\/","https:\/\/www.youtube.com\/user\/dreamhostusa"]},{"@type":"Person","@id":"https:\/\/www.dreamhost.com\/blog\/#\/schema\/person\/92e21736edd946a6d4455846c757d717","name":"Brett D.","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c560b676913f01e3c4679f853ce85f3b1ffb2a92716cb7a56bc03cefb687020d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c560b676913f01e3c4679f853ce85f3b1ffb2a92716cb7a56bc03cefb687020d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c560b676913f01e3c4679f853ce85f3b1ffb2a92716cb7a56bc03cefb687020d?s=96&d=mm&r=g","caption":"Brett D."},"description":"Brett's the VP of Corporate Communications at DreamHost and definitely not a robot. He tweets as @TremendousValue and it's not great.","sameAs":["https:\/\/www.dreamhost.com\/","https:\/\/x.com\/https:\/\/twitter.com\/tremendousvalue"],"url":"https:\/\/www.dreamhost.com\/blog\/author\/brett\/"}]}},"lang":"en","translations":{"en":77808,"es":77873,"ru":80023,"uk":80027,"de":80085,"nl":80152,"it":80163,"pt":80170,"pl":80214,"fr":80226},"pll_sync_post":{},"_links":{"self":[{"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/77808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/users\/964"}],"version-history":[{"count":2,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/77808\/revisions"}],"predecessor-version":[{"id":86984,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/77808\/revisions\/86984"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/media\/77826"}],"wp:attachment":[{"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/media?parent=77808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/categories?post=77808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dreamhost.com\/blog\/wp-json\/wp\/v2\/tags?post=77808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}