Eric Counts' customers first alerted him that his website had been attacked in early April.
"Basically one day I received a huge number of phone calls from people saying that they were getting warning alerts about my site when they were trying to access it," he said.
Malware had infected his website, CreditNerds.com, which helps consumers repair and improve their credit. The malicious code quickly spread to every page.
Although his clients' information, including their dates of birth and Social Security numbers, wasn't compromised, Counts decided to take down the website anyway, opting to change his website hosting provider. He spent $3,500 rebuilding the site.
"My clients were worried about identity theft," he said.
Before the attack, his five-year-old business was getting 10 to 15 new customers a week. That dropped to zero in the 10 days that he was dealing with the attack. He estimates that the cyberattack cost him about $9,000 in lost revenue.
"We're OK," said Counts. "At most, I've gone a couple of weeks without pay. We're lucky it wasn't worse."
As cyberattacks on small businesses surge, experts say companies have to fight back or risk losing businesses in the long run, according to latest industry reports.