03 · The real cost
The invoice is never just the ransom
A successful attack lands on every part of the business at once — money, time, reputation and hard-won accreditations.
Direct financial loss
Ransom payments, fraud, emergency IT support and recovery bills.
Downtime
Days of lost trading, lost billable hours and stalled projects.
Lost data
Customer records, financials and years of work — sometimes permanently.
Damaged trust
A public breach can undo years of reputation in a matter of days.
Compliance fallout
Lost accreditations, failed audits and breached contract terms.
Owner burden
Weeks of management time swallowed by the response — on top of the day job.
Most of these costs are uninsured and unbudgeted. For an SME, the difference between an incident and a disaster is usually decided before the attack begins.