Cyberattacks have solidified themselves as one of the main threats to the stability of small and medium-sized businesses. Beyond the economic impact, which in many cases can compromise the viability of the business, there is a less visible but equally relevant consequence: their effect on employees’ mental health and on talent retention. This is reflected in the Hiscox 2025 Cyber Readiness Report, noting that 42% of Spanish SMEs report that, after suffering a cyberattack, their employees experienced high levels of stress.
Besides the immediate stress caused by managing an incident, the consequences can extend over time and spill into the overall well-being of the workforce. In this sense, 39% of Spanish SMEs report an uptick in sick leave after a cyberattack, a figure that points to a real deterioration in team health. Add to that that 32% identify burnout or worker exhaustion, reflecting the pressure built up during and after the crisis. Likewise, 28% of companies admit that these episodes ended up impacting the internal climate, leading to a toxic work culture marked by tension and distrust.
Aggregated, these indicators reveal that the impact is neither temporary nor isolated: 73% of the organizations surveyed say they have detected negative consequences in terms of burnout, toxic culture, or high stress among their teams. A figure that shows cybersecurity is not only a technological or financial issue, but also deeply human, directly affecting emotional stability and the commitment of the people who sustain the business.
An impact that can also strengthen bonds
However, the report reveals that crises can also generate positive dynamics within organizations. 44% of Spanish SMEs say that after a cyberattack, employee loyalty to the company increased, while 43% observed greater camaraderie among teams. Net terms, 69% of companies identify a strengthening of internal ties, whether in the form of greater commitment or a spirit of collaboration.
These data highlight the double-edged nature of cybersecurity incidents: although they can tension the internal structure of the company, they can also strengthen the sense of belonging when crisis management is appropriate and transparent.
