The rapid rise of AI Agent cyber attacks, where thousands of bots keep attacking a site or platform is something that spells trouble for every business. Big banks, companies and public sector depts have teams of people and expensive software defences. But small enterprises with under 10 people do not. They can face serious problems even if they go offline for a day or two. In the past insurers in the cyber sector have offered a generic type of policy options, which often don’t cover the actual threat to the micro business. Might be crafted goods on Etsy, consultancy, a care agency, micro brewery – they are all very different.
One size doesn’t fit all when it comes to cyber and often what small business owners need is NOT a cash payout, but support, so they can start trading again. But the insurance industry doesn’t really offer that website rescue/rebuild & data recovery service. Maybe it should? Pay monthly option need to be there, plus different levels of customisable cover. Here are some insights from GlobalData who have done some research;
Micro enterprises face severe financial exposure to cyber risk due to a dangerous perception gap regarding their actual risk. Many small business owners falsely believe they are too insignificant to be targeted. However, the rise of AI-powered phishing tools now allows cybercriminals to automate and scale attacks easily, making smaller firms highly lucrative targets, says GlobalData, a leading intelligence and productivity platform.
GlobalData’s 2025 SME Survey found that 27% respondents without cyber insurance policy believe they are unlikely to fall victim to a cyberattack. This was followed by not finding a policy that included everything they needed, and believing they were already well protected against cyberattacks.
The findings come as threat actors increasingly shift their focus towards smaller firms. Research from cyber insurer Coalition shows that the frequency of business email compromise claims rose by approximately 30% in the second half of 2025 compared with the same period in 2024, with claims continuing to climb into 2026.
Coalition noted that this increase has fallen disproportionately on micro businesses, which attackers have historically bypassed in favour of larger, more valuable targets.
Generative AI is changing this dynamic. AI phishing kits have lowered the cost of creating convincing, automated social engineering lures at scale, allowing criminals to extract smaller, high-volume payouts from businesses that typically lack dedicated security teams or robust authentication controls.
Charlie Hutcherson, Senior Insurance Analyst at GlobalData, comments: “Many micro businesses still assume that their size keeps them off cybercriminals’ radar. That may once have been true, but AI tools have made it cheap and easy to target thousands of small firms at once. Attackers no longer need to single out a valuable target when they can automate the process and rely on volume, meaning a low profile now offers very little protection.”
For insurers, the challenge is as much about perception as it is about product.
Hutcherson continues: “Simplifying policy wordings and bundling core protections, such as business email compromise and fund transfer fraud cover, into standard commercial packages would help address concerns about incomplete cover.”
However, insurers and brokers will also need to show micro businesses how these attacks happen and what they cost, as many owners may not recognize their exposure until an incident occurs.
Hutcherson concludes: “As AI tools become more accessible, the volume of attacks aimed at the smallest businesses is unlikely to slow. Without a shift in how these firms view cyber risk, more of them will end up absorbing fraud losses, business interruption, and recovery costs themselves. Insurers that can make cover simple to buy and pair it with practical support such as help adopting multi-factor authentication, have an opportunity to grow in an underserved part of the SME market.”
*Information is based on GlobalData’s 2025 SME Survey and research from Coalition. GlobalData’s 2025 SME Survey examines businesses’ preferences when purchasing key insurance products and how they engage with providers. It also explores SMEs’ openness to new technologies, concepts, and products. SMEs with fewer than 250 employees were recruited via an online panel. The survey was carried out in Q4 2025, with 2,054 SMEs in 14 countries—Brazil, China, France, Germany, India, Italy, Malaysia, Mexico, Saudi Arabia, South Africa, Spain, the UAE, the UK, and the US.
Be the first to comment