About the ITRC 2022 Business Impact Report
The ITRC, with the assistance of SurveyMonkey, conducted two online surveys in August and September 2022 to explore the impacts of cybercrimes on small businesses as defined by the U.S. Small Business Administration. Questionnaires were completed by 447 individuals that met the criteria of being a person in a leadership position or an IT professional at a company of 500 or fewer employees, including solopreneurs. For our general survey, 55 percent (55%) of this year’s survey responses reflected the answers of people at businesses with ten or fewer employees, including 17 percent (17%) who identified as solopreneurs; 19 percent (19%) of responses were from companies with 11 – 50 employees; 12 percent (12%) of responses came from organizations with headcounts of 51-200 people; and 14 percent (14%) from businesses with 201-500 employees. Nineteen percent (19%) of a social media account takeover survey reflected responses from businesses with ten or few employees, including eight percent (8%) from solopreneurs; 36 percent (36%) of responses were from companies with headcounts between 11 – 50; 22 percent (22%) of responses came from SMBs with 51-100 employees; and, 22 percent (22%) were from organizations with teams between 101 – 500 people.
By far, the largest number of general survey responses came from people who identified as a business owner or partner – 58 percent (58%) – and 28 percent (28%) were from C-Suite and Sr. Executives. The social media attack survey generated responses primarily from “Owners or Partners” – 62 percent (62%) – and Senior Leaders at 25 percent (25%).
Unless otherwise noted in a specific question, the term “breach” referred to both a data and security breach.
