Test post: how most small businesses actually get breached
This is a test post to check how the blog looks. It will be replaced or removed before launch.
Four ordinary ways in
The Verizon 2026 Data Breach Investigations Report looked at 7,152 breaches at small and medium businesses. Most of them did not start with anything exotic.
- A supplier or another third party was involved in 55% of them.
- Software that had not been updated was the way in for 26%.
- A stolen or leaked password was the way in for 13%.
- A phishing message was the way in for 9%.
What that means for you
You do not need to defend against everything. You need to know which of these apply to your business and close those first. That is what threat-informed defence means.
