CTSI Blog

What an IT Outage Really Costs Your Small Business | CTSI

Written by CTSI | Aug 28, 2026, 12:56:00 AM

A frozen point-of-sale terminal during the lunch rush. A file server that will not mount on Monday morning. Email that stops moving right before a deadline.

Each one feels like a small interruption. Yet the cost of IT downtime for a small business adds up faster than most owners expect, and it reaches well beyond the hours the screens stay dark.

Key Takeaways

  • Downtime cost is never a single figure. It combines lost revenue, idle payroll, recovery labor, and lost customer trust, so the invoice you can see is only part of the total.
  • IDC research puts small business downtime at 137 to 427 dollars per minute, roughly 8,000 to 25,000 dollars per hour, with a single event costing between 82,200 and 256,000 dollars.
  • Ransomware is the most expensive form of downtime. Most victims recover within a week, but close to one in five take more than a month.
  • Human error causes close to 40 percent of major outages, which means most downtime is preventable with better process and oversight.
  • You can estimate your own exposure with one formula.

What Counts as IT Downtime

IT downtime is any period when the technology your business depends on is unavailable, or too degraded to use normally. The term covers much more than a total blackout.

Planned downtime is scheduled and manageable: a maintenance window over a weekend, a software update after hours, a server replacement you anticipated and prepared your team to work around.

Unplanned downtime is the expensive category. A drive fails, ransomware encrypts your files, the power drops, or an internet circuit goes down and nobody can process an order.

Because it arrives without warning and halts work immediately, unplanned downtime is the version this article addresses.

Partial degradation is the third form. A line-of-business application slows to a crawl, or one critical system fails while everything else keeps running. In both cases the affected employees cannot do their jobs, and the cost accrues for as long as the slowdown lasts.

How Much IT Downtime Costs a Small Business per Hour

Downtime has no single hourly price for a small business. The figure depends heavily on what the company does and what stops working.

IDC research conducted for Carbonite in 2015 put the cost at between 137 and 427 dollars per minute, which works out to an IT downtime cost per hour of roughly 8,000 to 25,000 dollars, and it pegged the total for a single downtime event at somewhere between 82,200 and 256,000 dollars.

The range is broad for understandable reasons, and a handful of variables move the number more than anything else.

A business that captures orders every minute loses considerably more per hour than one that invoices monthly. Ten idled employees represent a larger loss than two. An outage during your busiest afternoon costs far more than the identical outage overnight. And when the disruption becomes visible to customers, the damage reaches beyond the duration of the incident itself.

The trajectory becomes unmistakable as organizations grow. In ITIC's 2024 survey, more than 90 percent of mid-size and large companies reported that a single hour of downtime costs them over 300,000 dollars.

Cost escalates steeply with size, operational complexity, and how heavily the business depends on always-available systems.

The Costs That Do Not Show Up on an Invoice

The direct bill for an outage covers emergency labor and the sales you can measure, and it is usually the smaller part of the damage. The larger cost spreads across productivity, revenue, and customer trust, and none of it ever appears as a line item.

  • Idle payroll: when systems go down, your team continues drawing wages while they wait, and that expense runs the entire length of the outage.
  • Lost revenue: sales that fail to happen during an outage rarely materialize later, because a customer who cannot check out will frequently abandon the purchase altogether.
  • Recovery and catch-up: every hour offline typically demands more than an hour of effort afterward to clear the backlog once systems return to service.
  • Reputation and churn: a missed order or an unanswered phone call nudges a customer toward a competitor, and a public breach disclosure can shadow a business for years.

Business disruption, a category encompassing reputation damage and lost customers, is the single largest component of outage cost, exceeding both lost revenue and lost productivity.

What Causes Downtime for Small Businesses

Most downtime traces back to a surprisingly short list of causes, and the leading contributors sit largely within a business's own control.

Hardware wears out and fails. People make mistakes. Attackers find a way in. Power and network connections drop without notice. Severe weather takes out a building or a region.

Human error factors in far more heavily than most owners assume. Uptime Institute research found that close to 40% of organizations suffered a major outage caused by human error, with most of those incidents tracing back to staff not following procedures, or to procedures that were flawed to begin with.

The same finding points to the fix: a substantial share of downtime is preventable through better procedures and oversight.

Ransomware and Cyberattacks

Cyberattacks now rank among the most expensive causes of downtime, because they do not merely interrupt work; they hold it hostage. A single ransomware event can encrypt every file a business needs to operate and bring the entire organization to a standstill.

Recovery is seldom quick. In Sophos's 2025 State of Ransomware report, most victims were operational again within a week, but close to one in five required more than a month to recover fully, and the average recovery cost, before any ransom, reached into the millions.

Those averages skew toward larger organizations, though the fundamental shape of the problem is identical for a small business with far less financial cushion to absorb it.

The broader breach numbers reinforce the same lesson. IBM's 2025 Cost of a Data Breach report calculated the global average breach at 4.44 million dollars, with breaches in the United States averaging 10.22 million, and organizations requiring an average of 241 days to identify and contain an incident.

For a small business, however, the more relevant measure may be survival itself.

VikingCloud's 2025 research found that nearly one in five small businesses would be forced to close following a successful cyberattack, and 55 percent reported that a loss of 50,000 dollars or less would shut them down entirely.

Texas businesses now face heightened legal exposure alongside the operational risk. Our breakdown of Texas Senate Bill 2610 explains how the state's cybersecurity law reshapes your liability after a breach.

Why Downtime Can Cost More in Texas

Small businesses across Texas shoulder a downtime risk that firms in more grid-stable regions largely avoid: weather-driven power loss on a scale capable of lasting for days rather than minutes.

Winter Storm Uri in February 2021 remains the clearest illustration. More than 4.5 million Texans lost power, some for as long as four days, in an event the FERC and NERC final report described as the largest manually controlled load shedding operation in United States history.

The strain on the grid did not end there, either. The state's reliability monitor reported that 2024 produced the second-highest level of customer outages recorded in the past 15 years.

Major grid failures remain episodic rather than routine, and it would be a mistake to treat them as constant. Even so, the exposure is genuine, and it raises the practical value of backup power, cloud failover, and a recovery plan you have tested before the moment you depend on it.

How to Estimate Your Own Downtime Cost

You can attach a defensible dollar figure to an hour of your own downtime using two inputs: the revenue you forfeit per hour, and the payroll you continue paying while your people cannot work.

The underlying formula is straightforward:

Hourly downtime cost = revenue lost per hour + (employees affected x average hourly wage x the share of their work that depends on IT)

Consider a 20-person firm where 15 people cannot function without systems, at a loaded average of 30 dollars an hour, performing work that is roughly 80 percent IT-dependent.

That produces 15 x 30 x 0.8, or 360 dollars an hour in idle payroll. Add the revenue that stops flowing, perhaps 900 dollars an hour for a modest operation, and a single hour offline costs approximately 1,260 dollars before any recovery labor.

Across a full eight-hour day, the same outage runs past 10,000 dollars, a figure worth weighing against the far smaller cost of preventing it.

How to Reduce the Cost of IT Downtime

The most effective way to lower the cost of downtime is to have less of it, and to recover faster when it does happen. Both outcomes come from preparation rather than luck, and a few measures do most of the work.

  • Proactive monitoring and maintenance intercept problems before they interrupt the workday, and they form the core of managed IT services, where systems are watched around the clock and issues are resolved before your team becomes the first to notice something wrong.
  • Patch management closes the security gaps attackers depend on, sealing them before they can be turned against you.
  • Tested backups and a rehearsed recovery plan convert a potential disaster into a manageable inconvenience. A capable data backup and disaster recovery arrangement maintains recent copies of your data both on-site and off-site, so a ransomware hit or a failed server results in a restore rather than a rebuild from nothing. Datto has reported that the large majority of managed service providers observe clients with backup and recovery already in place suffering less significant downtime during an attack.
  • Managed cybersecurity contributes continuous monitoring and ongoing staff training, which matters enormously because so many incidents begin with a single careless click. CTSI's managed cybersecurity pairs layered defenses with an alert response team, reducing both the odds of an attack landing and the time required to contain one.
  • A reliable network removes one of the most common single points of failure. Dedicated network support services keep the connections your business depends on monitored and maintained, so a dropped circuit does not escalate into a full stop.
  • A written, tested response plan holds the entire approach together. Knowing precisely who does what in the first hour is what stops a small problem from expanding into a prolonged outage.

If you are uncertain where your own vulnerabilities lie, a free IT assessment is a practical place to begin.

Downtime Is a Cost You Can Control

Downtime is not a fixed cost of doing business that you simply have to accept. Once you understand what an hour offline would genuinely cost your operation, the argument for prevention tends to make itself. The practical next move is to identify where your systems are most likely to fail, then reinforce those points before they harden into an outage your customers will remember.

Frequently Asked Questions

How Much Does IT Downtime Cost a Small Business per Hour?

Most credible estimates for small businesses fall between roughly 8,000 and 25,000 dollars per hour, derived from IDC research placing the cost at 137 to 427 dollars per minute. The precise figure depends on your revenue model, the number of employees idled, and whether the outage is visible to customers. A cyberattack can drive the hourly cost substantially higher.

What Is the Biggest Hidden Cost of Downtime?

The largest hidden cost is usually business disruption, which captures lost customers and reputation damage rather than the direct labor or repair bill. Research from the Ponemon Institute found this category outweighed both lost revenue and lost productivity. That lost trust also happens to be the hardest cost to recover once it is gone.

What Causes Most IT Downtime?

The leading causes are hardware failure, human error, cyberattacks, and power or network outages. Uptime Institute research attributed close to 40 percent of major outages to human error, most of it connected to procedures not being followed. That reality makes a large share of downtime genuinely preventable.

How Long Does It Take to Recover From a Ransomware Attack?

Recovery time varies widely from one incident to the next. Sophos found in 2025 that most victims were operational again within a week, but nearly one in five needed more than a month to recover fully. Businesses with tested off-site backups consistently recover far faster than those left relying on paying a ransom.

Can IT Downtime Be Prevented?

Not every outage can be avoided, but the majority can be either prevented outright or substantially shortened. Proactive monitoring, regular patching, tested backups, and managed security address the causes behind most downtime. The realistic goal is fewer outages and faster recovery, not an impossible guarantee that nothing ever fails.