Vulnerable to attack: Businesses should boost cyber defenses

NEW YORK (AP) — When cyberthieves attacked Empire Industries' computer network, technology manager Rich Shemanskis could see files in the process of being infected by malicious software.

"We were looking at the network, and I noticed it, and another guy noticed it. We're looking at the files and watching them change," Shemanskis recalls about the attack three years ago.

Shemanskis told staffers to quickly shut down their PCs, which helped limit the malware's spread, but the company did lose about a day's worth of work. The saving grace for the Manchester, Connecticut, manufacturer of building materials was it had backed up most of its files.

A cyberattack that leads to down time and lost data can be more costly for smaller companies than for larger businesses — an average of $763 per affected computer or other device versus $470, according to a 2018 study by the Poneman Institute, which researches data protection. Many small businesses don't have sophisticated systems to protect themselves from hackers, viruses, malware and what's called ransomware, which renders files inaccessible unless a computer user pays thieves to release them. And many owners aren't tech-savvy enough to anticipate potential problems or don't make use of technology staffers or outside help to strengthen their defenses.

After the attack, Empire reassessed its security. "We already had antivirus protection, but we upgraded everything — we added more layers of security," Shmanskis says.

Empire's experience shows why it's critical for small businesses to keep strong defenses against cybercriminals.

"The nature of the threat continues to evolve," says Diana Burley, a professor at George Washington University's Graduate School of Education and Human Development whose expertise includes cybersecurity. Cyberthieves use increasingly advanced...