Cyber

Cyber case studies for SMEs

12/2022
cafe owner looking down

Understanding how your business could be affected by a cyberattack and preparing an incident response plan could save you from financial ruin.

These case studies are from real Cyber incidents. They highlight the impact on two SME businesses and describe how Chubb’s Cyber ERM policy can help you contain a cyber threat. 

Case study 1: Network attack

A data centre which hosted an online retail company’s website became the target of a distributed denial of service (DDoS) attack.

The incident, which utilised hacked IoT (Internet of Things) devices, flooded the data centre’s network with so much traffic that their network failed. This made the online retail company’s website inaccessible for a period of six hours before backup systems were able to restore 100% functionality.

After telephoning the Chubb Incident Response Hotline, an Incident Response Manager was assigned to the incident.

Financial impact

 

Recovery costs:

Increased cost of working required to get website functioning properly: $18,000

Costs to subcontract with external service provider: $23,000

Business Interruption: Lost sales and revenue from website downtime: $142,500

Incident Response Expenses:

IT forensics firm: $22,000

Legal consultation fees: $15,000

Incident Response Manager fees: $6,000

Total Cost: $226,500

Learnings

 

As the use of IoT devices increase, Distributed Denial of Service (DDoS) attacks are becoming more common and more powerful.

To minimise the impact of an incident like this, it is important to build a business continuity plan that ensures critical business applications, systems, and activities do not rely on only one single IT provider.

Chubb’s incident response managers and trusted Cyber vendors are experienced in dealing with DDoS attacks and can assist in getting SME businesses back on track as soon as possible.

Case study 2: Staff negligence

An employee at a hardware store ignored internal policies and opened a seemingly innocuous file attached to an email. The next day the hardware store’s stock order and cash registers started to malfunction and business trade was impaired as a result of the network failing.

Financial impact

 

Recovery Costs:

Increased staff costs to restore network to functioning order: $18,000

Business Interruption:

Lost sales and revenue from business interruption: $50,000

Incident Response Expenses:

Forensic investigation and response services: $100,000

Incident Response Manager fees: $10,000

Total Cost: $178,000

Learnings

 

This case study underlines the importance of training staff to be vigilant of cyber threats. The best ways to establish positive and secure habits within your company’s workforce is with regular training and education.

You should also restrict access to sensitive information by only allowing management or those who require that information for company operations, to have access.

Insights and Expertise

We keep you informed — and your business protected — with these helpful articles.
cyber insurance

Top five cyber tips for SMEs

There are a handful of simple measures that SME business owners can implement to limit their exposure to a cyber attack.
cyber

A better way to define and insure systemic cyber events

Michael Kessler, Vice President, Chubb Group and Division President, Global Cyber Risk, discusses the evolving insurance market for widespread cyber risks, including common misperceptions and solutions.
infographic header

Are SMEs over confident about their ability to manage cyber risk?

Small Medium Enterprises (SMEs) in Australia believe they are less vulnerable to cyber risks than their larger competitors, according to Chubb's SME Cyber Preparedness Report.
cyber sme preparedness 2019 article

Australia SME cyber preparedness report 2019

Many SMEs unaware of their regulatory obligations. Do SMEs think they are above the law?
data management

Making data management a business priority

With nearly every type of business embracing digital channels and platforms, companies are collecting more data than ever before. The question is, do they have the experience or technological capabilities to manage it in the right way?
multinational hero

How technology can help businesses become micro-multinationals

Innovation over the last decade has broken down geographic borders and brought the world closer together. Businesses need to be more agile and flexible; to rethink traditional, single-location-based operations; and to adopt remote working arrangements as the norm.

Have questions?

Ready to experience Chubb's unparalleled comprehensive insurance solutions? Speak to a broker today.