The Email Your Client Will Send You After Your Breach — Before You Even Know It Happened
Thought Leadership Financial Impact May 2026 · 8 min read In many SMB breaches, the business owner doesn't find out from their security team. They find out from a client who received a phishing email that appeared to come from them, lost money because of it, and wants to know what happened. That conversation — after the fact, without warning, at full financial exposure — is one of the most damaging moments a small business can face. It's 9:17am on a Wednesday. You're on your second coffee, answering emails, when one arrives from a client you've worked with for four years. The subject line reads: "Did you send this?" They've forwarded you an email that appears to come from your address — your name, your logo, your email domain — asking them to update their payment details for an invoice. They paid it. The payment went to an account you've never seen. They want to know if you authorized it...