Small organizations, including nonprofits like Vivian’s Door and local retailers, face increasing cybersecurity risks as AI tools lower the barrier for sophisticated hacking. In August 2025, Anthropic reported that a cybercrime ring used its Claude Code model to extort data from healthcare and government entities within a single month.
While AI models like Anthropic’s Mythos and OpenAI’s Astra are used to identify vulnerabilities, access to these powerful defensive tools is restricted to major corporations such as Nvidia, Google, and Apple. Smaller institutions often lack the budget and specialized IT staff to defend against automated, large-scale attacks.
The healthcare sector remains a primary target for ransomware, with initial demands often exceeding $4 million. Experts note that hospitals are particularly vulnerable due to their reliance on digital systems for patient care, combined with limited cybersecurity budgets and the use of aging software infrastructure.
Small business owners report that even minor incidents, such as card testing attacks, result in significant processing fees and operational downtime. As AI agents allow hackers to move beyond high-value targets to a broader range of institutions, smaller entities struggle to maintain adequate protection against these evolving threats.
