Real-World Cybersecurity: A Personal Story About Risk, Phishing, and Staying Safe (2025)

By Sara Cherny

There was a time when a CD-ROM drive felt like cutting-edge tech. I bought one as a gift for my then-boyfriend (now husband) when he left his job in a bank’s IT department to launch Tobin Solutions full-time. It was meant to be a symbol of support—and nerdy love. That drive fried his motherboard. I learned the hard way: never grab the item at the front of the shelf. Risk, it seems, has always been part of our digital lives.

Cybersecurity Risks Are Growing—And They’re Personal

Fast forward to 2025, and risk is everywhere. Phishing emails, vishing calls, smishing texts—they come at me every day. The IRS is allegedly after me. My social security number has been “suspended.” My “boss” needs urgent gift cards. My son sends me a random PDF. It’s a minefield of cybersecurity threats.

Sometimes, the red flags are easy to spot. But other times, when I’m busy or the message looks legitimate, I worry I’ll fall for it. That fear—that I could be the reason something goes terribly wrong—is very real. Especially working at a small business, where cybersecurity risks for employees are high and costly mistakes are easy to make.

Understanding the Human Side of Cyber Threats

I’m not the most technical person at Tobin. I’m actually one of the most vulnerable. I have an official title, access to sensitive files, and a last name that matches our CEO. I’m a prime target for phishing attacks and other forms of social engineering.

Thankfully, our company launched SleepWell Aware, our cybersecurity awareness training program. It was eye-opening. Phishing, smishing, vishing, whaling, malvertising—I had no idea how many ways attackers could reach me. What saved me was education and ongoing training. Because cyber criminals only need to be right once; we need to be right every time.

Simple Steps to Improve Your Everyday Cybersecurity

After going through cybersecurity training and real-life close calls, I’ve learned a few key lessons that anyone—especially non-technical team members—can benefit from.

Use a Password Manager

We’ve all been told to use complex passwords, but remembering dozens of 20+ character logins is unrealistic. Tools like LastPass help you generate, store, and share secure credentials without the hassle. It’s a must-have for small business cybersecurity and your personal sanity.

Enable Two-Factor Authentication (2FA)

Even if your password is compromised, 2FA can stop attackers cold. Whether it’s through an app like Authenticator or a text/email code, that extra step protects everything from your email to your payroll system.

Install Antivirus and Use Web Filtering

Basic antivirus and anti-malware software are table stakes. Tobin Solutions offers layered protection options that go beyond viruses to include phishing filters and endpoint protection. Cybersecurity for small businesses isn’t just a nice-to-have—it’s essential.

Have a Disaster Recovery Plan

What would happen if your network went down today? Or your data was locked by ransomware? A disaster recovery plan outlines how to back up, recover, and restore your systems, fast. It’s one of the most important elements of cyber risk management.

Why Cybersecurity Training Is a Must in 2025

At Tobin, every employee goes through regular training and testing. Our SleepWell Aware Security Awareness Program keeps us up to date with emerging threats and holds us accountable. And yes, I once clicked on a fake phishing test. I got the refresher course, and I’m better for it.

Phishing prevention isn’t about paranoia—it’s about preparation. Training your team could be the single best investment in your cybersecurity strategy.

The Cost of Cybercrime Is Too High to Ignore

In 2025, cybercrime damages are expected to exceed $10 trillion annually. The average small business hit by ransomware loses over $200,000 from downtime, recovery costs, and lost business. For many, the breach is fatal.

These aren’t just statistics. They’re real risks. But they’re also manageable—if you’re prepared.

Work with Tobin to Strengthen Your Cybersecurity Posture

Tobin Solutions offers Technology Action Plans (TAPs) and Security Audits tailored to your organization’s needs. Whether you’re looking to train your team, harden your network, or build a recovery plan, our team will help reduce the risk—and help you sleep better at night.

Contact Tobin Solutions to discuss your cybersecurity goals and take the next step toward protecting your business in 2025 and beyond.