Attacks are Evolving: 3 Ways to Protect Your Business in 2026

According to Data Breach Observatory, small- and medium-sized businesses (SMBs) are now more likely to be targeted, with SMBs accounting for 70.5% of the data breaches identified in 2025 and companies between 1 and 249 employees proving the most vulnerable. The article highlights three notable breaches from 2025: Tracelo, where more than 1.4 million records were stolen and put on the dark web, PhoneMondo with more than 10.5 million records leaked, and SkilloVilla, where more than 33 million records were exposed.

It notes that names and contact information were the most common records appearing on the dark web, contributing to phishing risks. To protect organisations in 2026, the piece recommends adopting two-factor authentication, securing access control via the principle of least privilege, enforcing strong password hygiene, and using a secure password manager to store credentials and monitor for any data appearing on the dark web. The guidance emphasises creating a single, secure repository for every credential and ensuring your tools and data are safeguarded accordingly.