What a hack actually costs you.

A shop owner wakes up to a note from her hosting company: her site's been suspended — hacked. By the end of this course, you'll know how to make sure it's never your story. First, let's be honest about what's at stake.

WHY THIS MATTERS A business owner reacting to news her website has been hacked

More than half of small businesses got attacked last year. This first lesson: what actually happens when one does.

In 5 Minutes

What you'll walk away with

01

The real odds of being attacked

Not bad luck, not rare — a number from this year's research that changes how you should think about your website.

02

The 4 ways a hack hurts

It's never just "the site went down." The damage reaches your customers, your Google results, your data, and your wallet.

03

A quick check on what you learned

One short scenario — practice spotting the damage before it happens to you.

The Real Odds

If a business got attacked last year, was that rare — or normal?

Here's the real number: more than half of US small businesses were hit by at least one cyberattack in the past year. The average business dealt with over two attack attempts. Getting attacked isn't bad luck anymore. It's the weather.

56%of US small businesses hit by at least one cyberattack in the past year (Hiscox, 2026)
2.38attack attempts aimed at the average small business (Hiscox, 2026)
The Damage

A hack costs money in 4 ways

And when the attack lands, the damage isn't one thing — it's four things at once. Let's walk through them.

1

Your visitors get burned

Hacked sites can silently infect the people who visit them.

2

Google buries you

A hacked-site warning drops your traffic to almost nothing.

3

Customer data leaks

Names, emails, payment details end up somewhere they shouldn't.

4

Recovery is expensive

Cleaning, patching, restoring, and winning Google's trust back.

Damage 1 of 4

Your visitors get burned.

First, and worst: your visitors. A hacked site can silently infect the people who visit it — or redirect them somewhere nasty. They blame you, not the hacker. These are your customers.

yourbusiness.com

Loading page…

silently redirected to: spam-offer-example.ru
The visitor never chose this. They blame you.
Damage 2 of 4

Google buries you.

Second: Google. It flags hacked sites with a warning — "This site may be hacked." Most people won't click. Your traffic drops to almost nothing, and the site you paid for stops feeding you customers.

www.yourbusiness.com
Your Business — Home
Welcome to our family-run shop, serving the community since…
This site may be hacked.
Most searchers won't click a flagged result.
Damage 3 of 4

Customer data leaks.

Third: data. Names, emails, payment details — anything your site holds can end up somewhere it shouldn't. Even if you never hear about it, your customers might.

Names & emails
Contact form submissions
Payment details
leaving your server, quietly
Anything your site holds can walk out the door
Damage 4 of 4

Recovery is expensive.

And fourth: recovery. Cleaning every infected file, patching the hole, restoring from a clean backup, then convincing Google to let you back in. Industry incident data puts a typical small business breach at $120,000 or more in downtime and cleanup — that's the low end of the range, and most of it is downtime, which is exactly the cost a fast, practiced response prevents. For 4 in 10 small businesses, a loss of $100,000 or less is enough to close the doors for good.

~$120Kthe low end of a typical small business breach cost, in damages and downtime (Verizon DBIR)
40%of small businesses say a loss of $100K or less could close the business permanently (VikingCloud, 2026)
Knowledge Check

A customer emails: "Your site just tried to make me download something weird." What is this a sign of?

A

Your site may be compromised — contact your host or support team now

Correct. Visitors getting silently infected or redirected is a classic sign of a hacked site. A quick check costs you nothing; waiting costs customers.
B

Their computer has a virus and it's unrelated

Possible, but you can't assume that. A hacked site infecting visitors is common and produces exactly this symptom. Check first.
C

A one-off glitch — wait and see if it happens again

Waiting is the trap: many hacks run silently for weeks before symptoms spread. Investigate now.
D

Apologize by email and move on

An apology doesn't fix an infected site — and the next visitor could be tomorrow's bad review. Investigate.

You can't prevent weather. You can put on a roof.

Almost every one of these attacks used a door that regular care would have locked. The rest of this course is about locking those doors — starting with how hackers actually get in. And if you'd rather never think about it: WebsiteCare.Direct handles monitoring, updates, and backups for you, from $49/month, month-to-month, no contract.