Nearly 8 in 10 small business leaders surveyed admit they are anxious about the safety of their company’s sensitive data and information
BANNOCKBURN, Ill. – October 24, 2023: Shred-it®, a leading secure information destruction service by Stericycle, Inc. (Nasdaq: SRCL), announced today the release of its 13th annual Data Protection Report (DPR), revealing crucial insights on information security concerns and challenges that small business leaders (SBLs) face. The report—titled “Vulnerable Small Businesses Risk Losing More than Just Money”—reveals perceptions of the current regulatory landscape and top barriers to compliance as well as assesses the demand for assistance from external partners.
According to the Identity Theft Resource Center’s 2022 Annual Data Breach Report, the number of data breaches remains in line with the all-time high set in 2021, and consumers are not oblivious to the stark realities of cybercrime. Eighty-one percent of consumers would stop engaging with a brand online following a data breach, stated a Ping Identity consumer report. Additionally, the cost of data breaches to all businesses is at its highest level ever with an average cost of more than $4.4M globally, more than $5.1M in Canada, and more than $9.4M in the U.S. This financial impact could cripple a small business as they face potential regulatory actions and fines, legal fees, and the loss of customers.
This year’s DPR found that 1 in 4 of the SBLs surveyed reportedly experienced a data breach in the past and, of those, 50% said it was caused by employee error. Close to half (45%) of consumers noted that they have experienced at least one data breach. Furthermore, 3 in 4 of the SBLs and almost all (94%) of the individual consumers surveyed said they are concerned about future data breaches. To help avoid future breaches, more than 90% of SBLs believe that data and information protection and compliance training is an essential security practice, but interestingly, only 15% require employees to complete them.
“Following years of stress from the global pandemic, small businesses and consumers now face many financial pressures due to inflation, lingering supply chain issues, and rising prices,” said Cory White, executive vice president and chief commercial officer at Stericycle. “Running a business is now more costly than ever, and businesses continue to look for ways to save money. Our 2023 Data Protection Report found that SBLs recognize that information and data security are critical in building and retaining strong relationships with customers. However, many are still at risk of losing customers and related revenue if sensitive physical and digital data protection becomes compromised. Addressing data protection properly is an essential part of business leaders’ strategic decisions.”
Business-critical insights from the report include:
“Small business leaders need to be proactive and allocate more budget upfront or risk significant revenue loss that is difficult to recover from,” said Michael Borromeo, vice president of data protection at Stericycle. “They have an opportunity to protect themselves by offering regular employee training and developing an understanding of the shifting data protection regulatory landscape — both of which a trusted third-party partner can provide valuable guidance.”
The full 2023 Data Protection Report provides actionable recommendations for small business leaders to help keep their digital and physical data secure as well as best practices to remain educated about changes in data protection legislation. Access to the full report and multimedia assets can be found here.
About the 2023 Data Protection Report
Shred-it’s 2023 Data Protection Report is a survey of 501 small business leaders (e.g., business owners, executives, C-levels, VPs, Director+ levels or equivalent) who work at or own companies with 15 to 100 employees in the U.S. and Canada across a variety of sectors (e.g., healthcare, finance, professional services, insurance, real estate, etc.), as well as 1,000 consumers in the U.S. and Canada. This research uncovered that many SBLs have critical concerns and challenges regarding information security and data protection. The report also describes the perceptions of SLBs with respect to today’s data protection regulatory landscape, top barriers to compliance, the future outlook, and demand for external assistance from partners.
Shred-it® is a secure information destruction service provided by Stericycle, Inc. (Nasdaq: SRCL). Shred-it’s leading information destruction solutions help ensure the security and integrity of private and confidential information, helping to protect the information of global, national and local businesses across North America and Europe. For more information, please visit www.shredit.com.