"We're Too Small to Be Targeted" — Why Hackers Love That Attitude
Key Takeaways
- 1.Hackers don't care what you do — they're looking for who's weak
- 2.Most contractors assume they're too small to be targeted, which is exactly why they get hit
- 3.No systems, shared logins, and clicking emails on the go is all it takes
- 4.Once you're in their sights, they're not stopping — attacks are persistent and automated
- 5.Simple steps like unique logins, two-factor authentication, and basic awareness training go a long way
- 6.Cyber attacks can halt your business overnight — lost data, frozen accounts, and reputational damage
"We're too small to be targeted." That's what most contractors think about cyber security. And it's exactly why they get hit. We sat down with cyber security expert Jenny Melling to find out what contractors really need to know.
"Hackers don't care what you do. They're looking for who's weak."
— Jenny Melling
No systems. Shared logins. Clicking emails on the go. That's all it takes. And once you're in their sights… they're not stopping.
Why Contractors Are Prime Targets
🎯 Small Doesn't Mean Safe
Cyber attacks are automated and opportunistic. Hackers scan for weak points at scale — they don't manually pick targets. If your defences are basic, you'll show up on their radar regardless of your size.
🔑 Shared Logins Are an Open Door
When everyone shares the same password or login, one compromised device means everything is exposed. Individual logins with two-factor authentication are a simple but critical step.
📧 Phishing on the Go
Contractors are busy — on site, in the van, between jobs. That's exactly when phishing emails catch people out. A quick tap on the wrong link can hand over access to your entire system.
💥 The Real Cost of an Attack
It's not just data loss. A cyber attack can freeze your bank accounts, lock you out of your systems, halt invoicing, and damage your reputation with clients. Recovery takes weeks — sometimes months.
Simple Steps That Make a Big Difference
✅ Unique Logins for Everyone
Every team member should have their own login credentials. No more shared passwords on a sticky note in the office.
✅ Two-Factor Authentication
Adding a second step to your login process (like a code on your phone) blocks the vast majority of automated attacks.
✅ Basic Awareness Training
Your team doesn't need to become IT experts. But knowing how to spot a dodgy email or suspicious link can prevent 90% of incidents.
🛡️ Jenny's Key Message
You don't need a massive budget or an IT department. You just need to stop assuming it won't happen to you — and take the basics seriously.
If you think cyber security doesn't apply to your business — watch the full conversation above. It might change your mind.
Featured Guest
Jenny Melling
Cyber Security Expert
More Fireside Chats
The Budget Is Coming — and It's Contractors Who'll Feel It First
Accountant and construction-sector specialist Hayley Gedney breaks down what UK contractors are really up against right now — and what to expect from the upcoming budget.
Being Flat Out Doesn't Mean Your Business Is Healthy
Alison from Evolve & Grow Coaching breaks down the three things that quietly make or break trade businesses: the numbers, the systems, and the people.
Do Construction Companies Really Qualify for R&D Tax Credits?
Daniel Bone from Leyton reveals why most construction firms miss out on R&D tax credits — and how one contractor claimed over £50,000 back for just 4–6 hours of work.