Mastercard study finds cybersecurity is becoming a key factor in SME growth in Puerto Rico

34% of SMEs surveyed reported experiencing a cybersecurity incident in the past year, while 48% say cybersecurity concerns have slowed or stopped their adoption of digital tools or payments.

Cybersecurity has become an increasingly important factor in the competitiveness, confidence and growth of small and medium-sized enterprises (SMEs) in Puerto Rico, according to local findings from the Mastercard 2026 SME Cybersecurity Outlook. In a market where digital payment adoption is nearly universal—98% of SMEs surveyed accept digital or cashless payments—strengthening security and confidence is essential to sustain digitalization and unlock new growth opportunities. The study shows that the risks are already tangible: 34% of SMEs surveyed experienced a cybersecurity incident in the past year.

Among the cybersecurity incidents experienced by SMEs in Puerto Rico, payment fraud was the most common (60%), followed by data breaches (37%) and system intrusion or hacking (35%). These concerns are already influencing concrete business decisions: 48% say they have slowed or stopped the adoption of digital tools or payment methods, higher than the 40% regional figure. In addition, 42% have delayed expansion into new customer segments, 41% have avoided adopting new payment methods, 38% have postponed partnerships with larger platforms, and 37% have delayed geographic expansion. Only 5% say cybersecurity has had no effect on their business decisions.

Despite this exposure to risk, awareness of cybersecurity is high. While 99% of SMEs report at least some familiarity with cybersecurity, only 20% feel very confident in their ability to protect their business, highlighting a clear gap between awareness and readiness. In addition, 56% have a formal cybersecurity response or recovery plan, while 38% still rely on informal or ad hoc processes.

In Puerto Rico, SMEs also see cybersecurity as a growth engine, not only as a protective measure. With stronger protections in place, 95% anticipate at least 11% additional growth, including 52% that expect growth of 26% or more. At the same time, businesses are looking for tangible support to strengthen their preparedness: 43% want fraud-prevention tools, 42% want personalized advice or cybersecurity audits, and 40% want both training and recovery support. These findings reinforce that cybersecurity not only protects operations, but can also enable safer and more confident digital expansion.

“For small businesses across Latin America and the Caribbean, cybersecurity is no longer just a technology concern—it is a business imperative,” said Ana Lucía Magliano, Executive Vice President, Services, Latin America and the Caribbean, Mastercard. “Concerns about fraud and cyberattacks continue to hold many SMEs back from pursuing new opportunities. When security becomes a fundamental part of their evolution, businesses are better positioned to expand, serve customers and thrive.”

“The survey results validate the importance for SMEs in Puerto Rico to adopt cybersecurity measures to protect the growth of their businesses. Although businesses here on the Island have demonstrated their resilience and entrepreneurial expertise and have been diligent in adopting digital payment solutions, it is imperative that learning how to protect their investment against cyberattacks and fraudulent activities is key,” said Pablo Cuarón, Country Manager, Puerto Rico, Mastercard. “That is why our goal is to continue offering avenues for SMEs to learn about the valuable technologies and services available to them to prevent and respond to cyber threats on an ongoing basis.”

To help businesses strengthen digital confidence, Mastercard continues to invest in technologies and services that help identify, prevent and respond to cyber threats. Through the Mastercard Trust Center, Mastercard offers a free cybersecurity education and resource hub for SMEs across Latin America and the Caribbean, providing research, training, assessments, tools and practical guidance to help businesses strengthen their cyber resilience. Mastercard’s ID Theft Protection for SMEs helps eligible cardholders monitor for compromised information, receive alerts and access support resources if an identity-related incident occurs.

Mastercard’s commitment to strengthening SME cybersecurity across Latin America and the Caribbean is part of its global effort to connect and protect 500 million people and small businesses on their path toward financial health by 2030.

Scope and methodology of the research

Research Scope and Methodology

The Puerto Rico findings from the Mastercard 2026 SME Cybersecurity Outlook are based on a survey of 200 small and medium-sized business owners and senior decision-makers conducted during the second quarter of 2026, as part of a broader study of 2,400 SMEs across 12 markets in Latin America and the Caribbean. Mastercard partnered with Payments and Commerce Market Intelligence (PCMI), a market intelligence firm specializing in the payments industry, to conduct the study. The Puerto Rico results have an approximate margin of error of ±6.9% at a 95% confidence level.