“I don’t send any money online. Why would I need cyber?”
We hear it all the time. Then one of our clients got a call he never expected. It wasn’t from a hacker. It was from his cyber insurance company.
“Hey, you have a problem with your website. There are hundreds of blog posts on it written in different languages. Something’s going wrong.”
He hadn’t written any of them. He didn’t know they were there. Someone was publishing in his business’s name, and he had no idea.
If you have a website, an email address, or a laptop with customer information on it, cyber insurance for small business is worth a second look. Here’s what happened to him and a few other ways cyber trouble finds businesses that “don’t do anything online.”
What Happened to Our Client’s Website
What our client had is a common hack, often called SEO spam. Hackers find a weak spot in a website, usually an outdated plugin or a weak password, and use it to automatically create pages full of foreign-language text and spam links.
The sneaky part is that the owner usually can’t see it. Visitors see the normal site, while Google sees the spam. And it isn’t personal. Automated bots scan the internet looking for any site with an unlocked door.
Why does that matter if no money was stolen?
- Your Google ranking takes the hit. Traffic drops, and Google starts showing your site for spam instead of your real business.
- They often leave a back door. Hackers commonly plant hidden files that let them get back in even after you change your passwords.
- Cleanup costs real money. You need someone who knows what they’re doing to find the infection, remove it, and lock the doors.
Our client was lucky. His carrier caught it before his customers did.
“But I Don’t Send Any Money”
You don’t have to send money to lose money. Here are the other ways we see cyber trouble land on small businesses.
Your files get locked up
Ransomware locks your computers and files until you pay. Small businesses get hit hardest. Verizon’s 2025 Data Breach Investigations Report found ransomware in 88% of small and midsize business breaches, compared with 39% at larger organizations.
Think about your business without access to your files, your scheduling, or your customer list for a week. That’s lost income, not just a computer problem.
Someone uses your email to steal from your customers
This is called business email compromise. A criminal gets into your email (or fakes it) and sends your customer a “new” invoice with new bank instructions. Your customer pays the crook, thinking they paid you. The FBI’s 2025 Internet Crime Report counted about $3 billion in business email compromise losses in a single year.
You never sent a dime. But now you’ve got an unpaid invoice and an angry customer.
A vendor you rely on goes down
You can do everything right and still get knocked offline by someone else’s breach. In 2024, a cyberattack on CDK Global, a software company that thousands of car dealerships use to run their sales and service departments, shut those systems down. Dealers were back to writing work orders by hand, and one consulting firm estimated the losses at more than $1 billion combined.
Your booking software, payment processor, or payroll system could be your CDK.
You hold customer information, and Texas law has a clock
Names, addresses, driver’s license numbers, card numbers, and payroll records are all data you’re responsible for protecting. If they’re exposed, Texas law sets deadlines. You have to notify the people affected within 60 days. If the breach involves at least 250 Texans, you also have to notify the Texas Attorney General within 30 days.
Notification letters, credit monitoring, and legal help add up fast, even for a small breach.
What Cyber Insurance for Small Business Typically Covers
Every policy is different, but a good cyber policy is built for exactly these problems. Depending on the carrier and the coverages you choose, it can help pay for:
- Breach response: forensic experts to find out what happened, legal guidance, and customer notification
- Data and website restoration: getting your systems and website cleaned up and running again
- Business income: lost income while you’re down
- Ransomware and extortion: expert negotiators and, in some cases, the payment itself
- Liability: if customers or regulators come after you because their information was exposed
- Social engineering and fake invoice fraud: often available as an add-on or a separate limit, so ask us about it specifically
One thing people miss: your general liability policy generally isn’t built for data breaches. Don’t assume you’re covered there. That’s what cyber liability insurance is for.
And as our client found out, some cyber carriers do more than pay claims. Some actively monitor for problems and call you before a small issue becomes a big one.
Who Should Reconsider Cyber Coverage
If any of these sound like you, it’s worth a conversation:
- You have a website, even a simple one
- You use business email to send invoices or quotes
- You take card payments or store payment information
- You use online booking, scheduling, or payroll software
- You keep customer records with personal information
- Your employees use laptops or phones for work
That’s most businesses we work with, from restaurants taking online reservations to contractors sending invoices from the truck. If you run a restaurant, our guide to restaurant insurance in Dallas covers the rest of your coverage picture.
Let’s Look at Your Exposure
Cyber insurance for small business isn’t about being a tech company. It’s about having a business that runs on computers, email, and the internet, which is almost every business now.
GIBB Insurance Services has helped Texas businesses protect what they’ve built since 1997, from our Dallas office to The Woodlands. As an independent agency, we shop multiple carriers to find cyber coverage that fits how you actually do business.
Call us at 214-324-3660 or get a quote online.