Decreasing Cybersecurity Focus Among Small Businesses in the Netherlands

Decreasing Cybersecurity Focus Among Small Businesses in the Netherlands

A recent study commissioned by the Dutch Ministry of Economic Affairs highlights a troubling trend: while cybersecurity awareness is growing among larger businesses, consumers, and government entities, small businesses are falling behind. The "Alert Online 2024" report shows that many small businesses, particularly those with fewer than ten employees, are failing to take adequate security measures, leaving them increasingly vulnerable to cyberattacks.

 

Declining Cybersecurity Efforts Among Small Businesses

One of the most concerning findings from the study is that one in three small businesses reported taking no cybersecurity measures in 2024. This marks a sharp rise from 19% in 2023, indicating a growing cybersecurity gap. Many small business owners either believe that their business is not a target or assume that cybercrime reporting will not lead to any meaningful action. This mindset leaves a significant portion of the small business sector exposed to phishing attacks, ransomware, and data breaches.

 

Compounding the issue, the rate of cybercrime reporting remains low among small businesses. Many business owners do not report incidents due to the perception that the damage is minimal or that reporting will not improve their situation. However, failing to report cyber incidents allows cybercriminals to operate unchecked and increases the risk for other businesses.

 

Minister’s Warning: Digital Resilience Is Crucial

Minister Dirk Beljaarts of Economic Affairs expressed concern about the growing cybersecurity gap between small and large businesses. "The Netherlands cannot afford to be complacent about digital resilience," he stated, emphasizing the importance of multifactor authentication (MFA), system updates, and incident reporting. While the government is working to provide information and resources, he stressed that businesses must take responsibility for their own security. Without stronger cybersecurity measures, small businesses risk becoming easy targets for cybercriminals.

 

Consumers Remain Cybersecurity-Conscious, but Reporting Is Low

In contrast to small businesses, Dutch consumers and employees have maintained steady awareness of cyber risks such as phishing, malware, and hacking. Surveys show that more than 30% of respondents rate their cybersecurity knowledge as moderate to strong—a figure unchanged from 2022 and 2023.

 

However, despite this awareness, three-quarters of Dutch consumers and half of business employees do not report cyber incidents. Most individuals are more concerned about data loss than financial fraud, leading many to take personal security precautions but refrain from reporting threats to ICT departments or authorities. This reluctance to report security incidents limits the ability of organizations to track cybercrime trends and strengthen overall security defenses.

 

Phishing Remains the Most Common Cyber Threat

Phishing continues to be the most widespread form of cybercrime in the Netherlands. The study found that 58% of employees received phishing emails in the past year, and the number was even higher (72%) among ICT professionals. While phishing remains the most common threat, ransomware and hacking incidents are also on the rise.

 

One of the study’s findings suggests that ICT professionals experience more frequent cyber incidents, likely due to their greater exposure to potential threats. Their awareness allows them to recognize cyber threats more easily, but it also underscores the growing sophistication of attacks that are specifically targeting high-value individuals within companies.

 

How Small Businesses Can Strengthen Their Cybersecurity

For small and medium-sized businesses (SMBs) looking to improve their cybersecurity posture, platforms like BaseFortify.eu provide practical solutions. As cyber threats continue to increase, small businesses need accessible and cost-effective tools to protect themselves. BaseFortify offers:

  • Vulnerability Monitoring – Continuous tracking of security weaknesses to identify risks before they are exploited.
  • Automated Updates – Ensuring software and systems remain up to date to prevent attackers from exploiting known vulnerabilities.
  • Multifactor Authentication (MFA) Enforcement – Reducing the risk of unauthorized access by requiring additional verification layers.

Given the findings of the "Alert Online 2024" report, small businesses that lack proper cybersecurity defenses must take immediate action. Solutions like BaseFortify provide user-friendly security measures tailored for SMBs, enabling them to protect their operations, safeguard customer data, and reduce the risk of falling victim to cybercrime.

 

Links and Sources