Experiences and Lessons Learned at a Small and Medium-Sized Enterprise (SME) Following Two Ransomware Attacks

Abstract

Because of resource constraints compared to larger corporations facing similar threats, small and medium businesses face unique cybersecurity challenges. We describe the case of a small U.S. manufacturing company that suffered two ransomware attacks. After it had recovered from the first attack, it strengthened its cybersecurity but was still breached again four years later. In addition to highlighting the growing skill and adaptability of attackers, the lessons learned and our resulting recommended actions will help SMEs strengthen their cybersecurity concerns and recover from cyberattacks.