The Biggest Risks Facing Small Businesses in 2026
Most small businesses insure the risk they can picture and skip the one that actually closes them. Here are the seven that show up most in claims data, ranked by how likely each is to be fatal rather than expensive.
- Cyber incidents are now the most common serious loss for small businesses, and business email compromise costs more than ransomware for firms under 50 people.
- Employment claims — wrongful termination, discrimination, wage and hour — are the fastest-growing liability exposure and are excluded by general liability.
- Business interruption, not the physical damage, is what closes businesses after a fire or storm.
- Underinsurance from an outdated application is a self-inflicted risk: coinsurance penalties and class-code mismatches reduce payouts on claims that were otherwise covered.
- Every risk on this list has a specific policy or a specific procedure. None of them are unmanageable; most are just unaddressed.
1. Cyber and business email compromise
The mental image is ransomware. The actual claim is more often an invoice fraud: someone compromises an email account, watches for a payment, and sends altered wire instructions. Small businesses lose five and six figures this way routinely, and it is not covered by general liability or crime coverage in every form.
Cyber liability covers forensics, notification, credit monitoring, regulatory fines where insurable, ransom payment where legal, and business interruption from a system outage. Look specifically for social engineering and funds transfer fraud coverage — it is frequently a low sublimit that you can buy up.
The controls that lower premiums are the same ones that prevent the loss: multi-factor authentication everywhere, offline backups, and a call-back verification rule for any change to payment instructions.
2. Employment practices claims
Wrongful termination, discrimination, harassment, retaliation and wage-and-hour claims are the liability category growing fastest for businesses under 100 employees. Defense alone routinely reaches $50,000 to $150,000, and general liability covers none of it.
Employment practices liability insurance is the policy. Wage-and-hour claims are usually excluded or offered as a small defense-only sublimit, which is worth asking about specifically because that is the highest-frequency version.
The procedural mitigations are boring and effective: a written handbook acknowledged in writing, documented performance conversations, a consistent termination process, and accurate exempt/non-exempt classification.
3. Injury to an employee or a customer
Workers’ compensation handles employee injury and is mandatory above your state threshold. The exposure people miss is employer’s liability — the part of the comp policy that responds when an injured employee’s claim comes back at you through a third party, and the part that action-over exclusions remove.
Customer injury sits on general liability. The frequency driver is boring: wet floors, poor lighting, uneven thresholds, unsecured merchandise. The severity driver is documentation — a business that cannot produce an incident report and a maintenance log settles claims it could have defended.
4. Business interruption
A fire, a burst pipe, a hurricane or a supplier collapse stops revenue while costs continue. Property insurance rebuilds the building. Business interruption replaces the income, and it is the coverage most often bought at too low a limit or with a waiting period that is too long.
Set the limit against a realistic recovery timeline — for a restaurant or a manufacturer, twelve to eighteen months, not three. Add extra expense coverage so you can pay for the temporary location that shortens the outage.
Contingent business interruption extends this to your suppliers’ losses, which is the version that matters if one vendor supplies most of your inventory.
5. Supply chain and single-vendor concentration
Concentration is the risk, not disruption. A business where one supplier provides 60 percent of inventory, or one client provides 40 percent of revenue, has an uninsurable exposure that no policy fixes.
The mitigations are commercial: qualify a second source before you need it, hold buffer stock on the items with the longest lead time, and write force majeure and price adjustment terms into your own contracts so that a shock passes through rather than absorbing entirely into your margin.
6. Key person dependency
In most small businesses one person holds the client relationships, the technical knowledge or the license the business operates under. Their death, disability or departure is an existential event.
Key person life and disability insurance funds the gap. Just as important and much cheaper: document the processes, share the credentials properly, and make sure at least one other person can run payroll and access the bank.
7. Underinsurance you do not know about
The most common uncovered loss is a covered loss that pays less than expected. Three causes dominate: property insured at an outdated value triggering a coinsurance penalty, revenue or payroll understated on the application, and a class code that no longer matches what the business does.
The fix takes an hour a year. Update revenue and payroll, revalue property at current replacement cost rather than what you paid, and tell your broker about every new service line. An accurate application is the cheapest coverage improvement available.