Cyberattacks have increased by 400% since before the COVID-19 pandemic. As cyberattacks become more prevalent, it’s especially important that small businesses protect themselves, since they face a high risk of bankruptcy following a cyberattack. 

Small- to medium-sized businesses (SMBs) typically don’t prioritize cybersecurity as much as large companies, which makes them prime targets for malware, phishing, viruses, and other cybersecurity threats. According to the 2021 Data Breach Investigations Report, an estimated 86% of cybersecurity breaches will have a financial impact that could range from just a few hundred dollars up to hundreds of thousands. This unexpected cost could be too much for many SMBs to survive.

As internet experts, we take cybersecurity seriously, which is why we evaluated which states’ businesses fare best after cyberattacks. To determine the odds of a business recovering from a cyberattack in any given state, we analyzed a host of factors, including internet privacy laws and the number of cyberattacks businesses within each state suffer each year. 

Here’s what we found.

The Likelihood Each State’s SMBs Will Recover from a Cyberattack

The Top 5: State-by-State Breakdown

States Where Businesses are Least Likely to Go Bankrupt After a Cyberattack-South Dakota

South Dakota, which has cleverly dubbed itself the “Silicon Prairie,” has the highest number of small businesses per capita: 4,725 small businesses per 10,000 residents. 

The state also recently signed into law a data privacy bill that requires companies and residents to report data breaches that affect more than 250 residents to the state’s Attorney General and consumer reporting agencies within sixty days of discovery.

The Likelihood Each State’s SMBs Will Recover from a Cyberattack-Louisiana

Louisiana requires that businesses report a data breach to consumers within sixty days. It also requires that businesses notify the government of the breach, regardless of how many individuals were affected. 

In addition, Louisiana SMB Development recently launched a no-cost cybersecurity initiative that offers various training programs to help businesses in Louisiana fortify themselves against cyberattacks.

The Likelihood Each State’s SMBs Will Recover from a Cyberattack-Alabama

Alabama requires that businesses report a data breach within forty-five days. Plus, Alabama is vigilant when it comes to cybersecurity research. Seven federal agencies within the state are involved in cybersecurity research, fifteen colleges in Alabama offer IT courses that cover cybersecurity, and the state is home to ten cybersecurity startups.

The Likelihood Each State’s SMBs Will Recover from a Cyberattack-Vermont

Businesses in Vermont must notify consumers and the government as soon as the breach occurs, without reasonable delay and no later than forty-five days from occurrence—fifteen days sooner than South Dakota and Louisiana.

The Likelihood Each State’s SMBs Will Recover from a Cyberattack -South Carolina

As in Vermont, businesses in South Carolina are required to notify consumers of a breach as soon as it occurs. Thanks to the South Carolina Insurance Data Security Act, South Carolina was the first state in the country to pass legislation that protects SMBs from cybersecurity threats.

Methodology

To analyze the states least likely to see businesses declare bankruptcy following a cyberattack, we included the following in our analysis: 

From there, we standardized each category by giving each state a weighted score. The higher the score, the less likely small businesses in each state will go bankrupt after a cybersecurity attack. 

Here’s the breakdown of how we calculated the weighted score: 

  • Small businesses per population: 20%
  • Percent of all business bankruptcies state level: 25%
  • Total number of data breaches per 10,000 businesses: 15%
  • Total number of records lost or stolen per 10k businesses: 15%
  • Corporate loss per 10,000 businesses: 5%
  • Malware loss per 10,000 businesses: 5%
  • Phishing scams per 10,000 businesses: 15% 

Once each state received a weighted score, we curved each score to determine each states’ overall score in the form of a cybersecurity letter grade: 

  • A = 78–100 points 
  • B = 75–77 points 
  • C = 71–74 points 
  • D = 56–70 points
  • F = 0–55 points 
StateScoreGradeNumber of small businesses per 10k peoplePercent of total business bankruptcies
Alabama78.97A8091.01%
Alaska51.99F1,00310.11%
Arizona73.92C7852.63%
Arkansas73.69C8282.09%
California68.39D1,0124.34%
Colorado72.89C1,0943.74%
Connecticut67.5D9732.93%
Delaware51.38F84341.35%
District of Columbia67.78D1,0787.46%
Florida71.19C1,1644.03%
Georgia74.75C1,0362.12%
Hawaii71.59C9373.71%
Idaho75.6B9122.54%
Illinois74.12C9472.05%
Indiana74.04C7611.39%
Iowa65.92D8573.82%
Kansas75.16B8733.80%
Kentucky70.3D7861.64%
Louisiana80.33A9622.80%
Maine77.33B1,0965.14%
Maryland54.46F9832.05%
Massachusetts58.83F9715.58%
Michigan77.47B8751.69%
Minnesota69.61D9223.27%
Mississippi74.96C8652.24%
Missouri76.55B8671.79%
Montana69.96D1,1256.39%
Nebraska78.05A9123.21%
Nevada71.33C8773.46%
New Hampshire77.55B9913.95%
New Jersey75.52B9952.79%
New Mexico68.09D7863.08%
New York73.73C1,1316.79%
North Carolina73.17C8713.40%
North Dakota77.58B9603.28%
Ohio74.83C8121.68%
Oklahoma75.69B8862.58%
Oregon70.64D8962.60%
Pennsylvania70.63D8593.23%
Rhode Island74C9582.53%
South Carolina78.24A8122.21%
South Dakota96.3A4,7256.90%
Tennessee76.82B8831.37%
Texas71.49C9319.10%
Utah70.96D8981.63%
Vermont78.34A1,2448.07%
Virginia71.84C8742.16%
Washington70.89D8002.98%
West Virginia66.49D6333.27%
Wisconsin75.67B7772.27%
Wyoming55.77F1,1525.54%

About Go.Verizon.com: Go.Verizon.com is an authorized premium partner of Verizon.

Reporters may send questions to media@verizon-business.com.

Call 1-800-555-1536 to ask an expert about products in this article.

Get a quote White Right Arrow

Interested in Verizon? Call 855-976-7454

This site is a US Consumer site. You can learn more about our site and