Ransomware Wave Engulfs SMBs and Cities: Is Anyone Safe?

A massive ransomware wave is hitting small businesses (SMBs) and city governments in 2025. Sophisticated criminal groups use "attack-as-a-service" offerings on the dark web, making it easier for even novice hackers to launch devastating campaigns, according to a new Guardz report.

SMBs and Cities Targeted Like Never Before

Weak defenses, rising threats

• The number of weekly attacks on SMBs doubled versus last year. 80% of attacks now target credentials. No organization is too small to be a target.
• Municipalities face similar crises. The St. Paul, MN ransomware attack triggered a full city shutdown, with 3,500 employees locked out and systems paralyzed for days.
• Interlock, a new ransomware group, claimed responsibility for leaking 43GB of city data online after the ransom was refused.

Why the Risks Persist

Urgent lessons in resilience

• Older IT infrastructure, limited budgets, and insufficient staff leave cities and SMBs uniquely exposed.
• Even new defenses—like advanced security tools—aren't enough if cyber hygiene and rapid patching are missing.
• Attackers exploit every vulnerability, often through phishing and social engineering.

What to Do Right Now

Practical defense moves

• Audit existing infrastructure; patch and update every device and app.
• Compartmentalize systems to contain breaches; practice clear incident response plans with external experts on call.
• Invest in talent—train or partner for IT help, and join national threat-sharing alliances.
• Engage in public-private partnerships to strengthen resilience and recover faster from future attacks.

Source: TechNewsWorld, September 19, 2025

The cyber threat landscape is evolving rapidly. For SMBs and cities, the only winning move is proactive defense, resourcefulness, and a willingness to learn from every incident—big or small.