October is Cyber Security Awareness Month, a global initiative aimed at raising awareness about protecting ourselves online. This year, it matters more than ever.
Because cybercrime has officially entered a new era and everyone is a potential target.
American organizations paid a record $11.5 million on average per data breach in 2026, according to IBM, more than double the global average and the highest figure the report has ever recorded. Globally, cybercrime now costs the world $10.5 trillion a year. That represents the largest transfer of economic wealth ever, eclipses the annual damage caused by natural disasters and means cybercrime will officially become more profitable than the global trade of all major illegal drugs combined.
It’s not just the financial impact that’s concerning. Cyber threats are growing more sophisticated, more dangerous and harder to spot.
Small businesses are increasingly falling victim to real-time phishing scams, a terrifying rise in ransomware gangs and digital attack surface breaches.
Today’s cybercriminals aren’t just using new tech to better succeed at old tricks like ID theft and financial fraud. They’re weaponizing generative AI to clone children’s voices for fake kidnap ransoms, using deepfakes to manipulate your trust, scamming grandparents, extorting children and trading more personal data on the dark web than ever.
“Today, cyberattacks like ransomware, data breaches, phishing and online fraud are growing in both frequency and severity, impacting governments, businesses and individuals alike,” says Elizabeth Kim, President of BOXX USA.
“From corporate executives and remote workers to ordinary families and individuals, everyone is a potential target. Cybersecurity awareness and digital resilience can no longer be underestimated, it’s critical for people to take proactive steps to protect themselves online.”
With Cyber Security Awareness top of mind this October, now is the perfect time to sharpen your cyber knowledge to better advise clients on their digital defences.
The #1 Threat
As digital footprints grow and homes and businesses become more interconnected and cloud-dependent, so does the challenge of keeping personal data safe.
In fact, cybercrime is now the biggest threat to an individual’s digital life, whether at home or at work.
The FBI’s Internet Crime Complaint Center logged $20.9 billion in reported internet crime losses in 2025, while more than half of Americans have experienced a data breach. It’s not surprising, considering business email compromise fraud alone cost American businesses $3.04 billion in 2025 and today’s hackers can crack a weak password in 1 second.
Small businesses are especially vulnerable and increasingly targeted. They’re three times more likely to get hacked and experience 350% more social engineering attacks than larger ones. 76% of US organizations experienced payments fraud in 2025, according to the Association for Financial Professionals, with business email compromise affecting 74% of organizations. For many small businesses, an incident like this means they won’t recover.
“Cyber criminals have more tools than ever,” says Kim. “With AI, they’re faster, more convincing and more scalable. That makes cybersecurity awareness more critical than ever, for everyone.”
That’s why Cyber Security Awareness Month matters. It’s a reminder for individuals, families and businesses to take back control: to protect data, educate family members or employees and invest in tools that help keep everyone safe online.
Lack of Cyber Awareness and Education
Despite the rise in cybercrime, many people are still unaware of the risks.
A concerning 65% of American senior executives revealed they’ve been the target of at least one cyberattack in the past 18 months, while many companies admit they don’t know enough about cybersecurity to protect themselves.
Part of the problem is security fatigue: 69% of people say they feel overwhelmed by the number of passwords and security steps they’re expected to manage, according to Bitwarden’s 2025 survey, making it easier to tune out the constant warnings about cyber threats instead of acting on them.
“This lack of cybersecurity awareness makes it easier for cyber criminals to succeed in their attacks, leaving both individuals and companies increasingly vulnerable,” says Melanie Bean, Claims Manager at BOXX. “Most hacks target small businesses, and better preparation and awareness on the topic can lessen the aftermath of the attack,” Bean continues.
On an individual level, it’s even more alarming. Many internet users don’t use privacy tools to safeguard their personal data. And even though the FBI’s IC3 recorded over 11,000 sextortion reports involving people under 20 in 2025, only 66% of teen cyberbullying victims told a parent about it, according to the Cyberbullying Research Center’s 2025 national survey.
Lack of Cyber Insurance
Despite rising cyber threats, many American businesses hesitate to invest in cyber insurance, often assuming they won’t be targeted.
Over 40% of insurance agents report clients refuse coverage, believing their data isn’t valuable or that small businesses aren’t appealing to cybercriminals.
As cyber threats evolve, so must our cybersecurity awareness, preparedness and defences. Taking cybersecurity measures and getting the right cyber insurance are your clients’ best bet against growing cyber threats. Here are some best practices to safeguard individuals, households and businesses:
There’s a lot to be anxious about in our digital world as we observe Cybersecurity Awareness Month in 2026. But consumers and businesses can fight back by making cybersecurity awareness and resilience a priority. Advising clients to stay informed and invest in the right protection and insurance can help keep their business, home and family safe.
Becoming cyber aware is the first step. For more insights on how to safeguard your digital world, check out BOXX’s cybersecurity resources.
Get the latest updates about Cyber Insurance and Protection with our newsletter.