43% of Cyberattacks Now Target Small Businesses as AI Fuels New Threats

📋 What to Know
- 43% of all cyberattacks now target small and medium-sized businesses.
- AI is dramatically speeding up cyberattacks, making phishing and ransomware more convincing.
- New comprehensive data privacy laws took effect in Indiana, Kentucky, and Rhode Island on January 1, 2026.
- California's Delete Act, allowing single deletion requests to data brokers, becomes functionally enforceable in August 2026.
AI Supercharges Phishing and Ransomware
Artificial intelligence is fundamentally reshaping the cybersecurity landscape, making attacks faster, cheaper, and harder to detect. Experts note that AI is not just creating new types of attacks but is accelerating existing threats like phishing and ransomware. Brendan Saltaformaggio, an associate professor in the School of Cybersecurity and Privacy at Georgia Tech, emphasized this shift, stating, "AI is dramatically speeding up cyberattacks. AI can identify vulnerabilities far faster than humans and often in places humans wouldn't think to look." This means AI-powered phishing emails are now hyper-personalized and context-aware, mimicking trusted contacts with uncanny accuracy, while ransomware operations are scaling at unprecedented rates.New Privacy Laws Reshape Digital Rights
Beyond the escalating threats, the digital rights landscape is also undergoing significant changes with new data privacy laws taking effect across the United States. As of January 1, 2026, new comprehensive state privacy laws became effective in Indiana, Kentucky, and Rhode Island, granting consumers expanded rights to access, delete, correct, and port their personal data. Furthermore, California's Delete Act (SB 362) and its Delete Request and Opt-Out Platform (DROP) are becoming functionally enforceable. Starting August 1, 2026, California residents can submit a single deletion request to hundreds of data brokers through a centralized portal, requiring these brokers to process requests within 45 days. This push for greater consumer control reflects a nationwide trend towards enhanced data protection and organizational transparency.Impact on Egyptian American Businesses and Families
For Egyptian American families and business owners, these developments mean both increased risks and new protections. Your personal data and your business's sensitive information are under constant threat from increasingly sophisticated cyberattacks. A single breach can lead to significant financial losses, operational disruption, and damage to customer trust. On the other hand, the new privacy laws empower you with more control over your digital footprint. Understanding your rights under these new state laws, especially regarding data deletion and opting out of data sharing, is crucial. These regulations aim to give you more say in how companies handle your personal information.Staying Ahead in a Dynamic Digital World
Navigating this evolving digital landscape requires vigilance and proactive measures. Businesses must prioritize robust cybersecurity defenses, including multi-factor authentication and regular employee training on identifying AI-powered phishing attempts. Individuals should also be aware of their expanded data privacy rights and utilize tools like California's new Delete Act platform to manage their personal information. Staying informed and taking action are your best defenses in this new era of digital threats and rights.📋 Sources & References
- Litefoot Technologies — Top 5 Cybersecurity Threats Facing Small Businesses in 2026
- Total Assure Blog — Cyber Attacks on Small Businesses Statistics 2026
- Levenfeld Pearlstein — U.S. Privacy Laws (and Key Provisions) That Take Effect or Become Enforceable in 2026
- PrivacyOn — Understanding the Consumer Data Privacy and Security Act of 2026

columnist
Technology and culture correspondent covering AI, cybersecurity, and the intersection of Arab heritage with modern innovation. Yasmine holds a degree in Computer Science from Cairo University and has reported on tech ecosystems across the Middle East and Silicon Valley.