Millions of Small Businesses Face Rising Cyber Risks as Microsoft Office Support Ends
Table of Contents
A staggering 77% of small companies are now vulnerable to cyberattacks following the official end of support for Microsoft Office 2016 and 2019, leaving them without critical security updates.
The findings, released in a recent study by the German groupware and security provider Intra2net, reveal a widespread lack of preparedness among small and medium-sized enterprises (SMEs). Despite knowing the end-of-life dates for these software versions, the vast majority have failed to migrate to supported alternatives, creating a significant and growing security gap.
Widespread Vulnerability Across German SMEs
According to the Intra2net study, conducted in September 2025, the problem is particularly acute in Germany. Researchers evaluated data from 104 small companies, encompassing a total of 1,567 PC workstations, specifically excluding those utilizing Office 365 or Hosted Exchange. The results paint a concerning picture: nearly three-quarters of these businesses are operating with software no longer protected by Microsoft’s security patches.
The continued reliance on outdated software is striking. Currently, 65% of SMEs still have Office 2016 or 2019 installed. What’s more, the share of companies using Office 2016 has remained constant over the past year, despite its initial release in 2015. A significant minority – around 12% – are even running Office 2010 or 2013, versions that have been unsupported by the manufacturer for years.
Slow Adoption of Newer Office Versions
While some companies are beginning to address the issue, the pace of change is slow. Only 8% of small businesses have transitioned to Office 2024, primarily migrating from Office 2019. Office 2021, meanwhile, is barely registering as a migration destination.
“The results are alarming, but not a surprise,” stated a company release from Intra2net AG. “Many small companies have not used the last twelve months to update their Office package in a timely manner. Together with the end of support for Windows 10, there is now a massive need to catch up – especially since Microsoft does not offer an interim solution in the form of extended security updates.”
A Broader Trend of IT Modernization Lag
The Intra2net study underscores a broader challenge facing SMEs: a reluctance to modernize their IT infrastructure. This hesitancy leaves them exposed to a range of security threats and hinders their ability to leverage the benefits of newer technologies. The lack of proactive updates creates a fertile ground for cybercriminals, who actively target known vulnerabilities in unsupported software.
This situation demands immediate attention, as the consequences of a successful cyberattack can be devastating for small businesses. The study highlights the critical need for SMEs to prioritize IT security and invest in modern, supported software solutions to protect their data and operations.
Keep reading
- New Trilateral Defense Pact Reshapes Regional Security (newsy-today.com)
