Good morning. Small businesses are increasingly battling costly cyberattacks. Sometimes the pain is enough to put them out of business. In January, cyber thieves ran roughly 100,000 stolen card numbers through the payment system of Innovative Higher Ed Consulting Inc., a small startup in New York. Soon after, Bank of America Merchant Services, the startup’s payment processor, sent a $27,000 bill for reversing the charges.

“We had alerted the bank that there was fraudulent activity,” said IHEC co-founder Jessie Daniels, a sociology professor who started the company as a sideline. “Instead of saying, ‘Thank you,’ they came after us.” The fledgling company had just $1,200 in revenue when it closed in May because of the cyberattack, she said.

[Continued below...]

As larger companies harden their cyber defenses, small businesses are facing more attacks. Sixty-seven percent of small- and medium-size businesses reported they had experienced a cyberattack in the past 12 months, up from 55% in 2016, according to a 2018 survey of roughly 1,000 firms by the Ponemon Institute, a data-security  consulting firm.

Even the smallest companies can be vulnerable. “It’s not unusual to hear that a small business in the formative stage has a relatively significant exposure,” said Larry Ponemon, the institute’s founder and chairman. “We have seen this time and time again.”

• China escalated an already spiraling trade dispute with the U.S., saying it would create a blacklist of foreign entities that harm Chinese businesses, in apparent retaliation for Washington’s clampdown on Huawei Technologies Co.
   
• The Justice Department is gearing up for an antitrust investigation of Alphabet Inc.’s Google, a move that could present a major new layer of regulatory scrutiny for the search giant, according to people familiar with the matter. The plans to investigate have been building over time, amid a growing public conversation about whether the government should do more to scrutinize the handful of giant tech firms that dominate the U.S. landscape.
   
• U.S. air-safety regulators said nearly 150 parts inside the wings of more than 310 of Boeing Co.’s 737 jets, including grounded MAX models, may be defective and need to be replaced. The Federal Aviation Administration’s Sunday statement indicated the manufacturing problem doesn’t pose an imminent accident hazard. But the move comes during heightened global scrutiny of the 737 MAX’s safety and amid separate efforts by the FAA and plane maker to agree on a software fix to prevent misfires of a potentially dangerous flight-control system.
   
• CVS Health Corp. is expected to defend its acquisition of insurer Aetna Inc. in two high-profile settings Tuesday, seeking to sell skeptical investors and a federal judge on the nearly $70 billion deal. CVS lawyers are slated to be in a Washington, D.C., federal court for the start of an unusual three-day proceeding in which a judge s considering whether the Justice Department adequately protected competition when it approved the deal last year.
   
• A New York state court jury ordered Johnson & Johnson to pay $300 million in punitive damages to a woman who claimed her use of the health-products company’s talc powder caused an asbestos-linked cancer. The jury’s award was one of the largest to an individual in a series of trials over a range of safety-related allegations about its talc products, including Johnson’s Baby Powder.
   
• A lieutenant of William “Rick” Singer, the mastermind of the national college-admissions scheme, will plead guilty for his role in the operation and become a cooperating witness, according to a plea agreement filed in federal court.
   
• The Food and Drug Administration held its first-ever hearing on the safety and marketing of chemicals from the cannabis plant, with food makers and others in industry urging the agency to approve the ingredient CBD and academics raising safety concerns.
   
• Chinese authorities are investigating FedEx Corp. over allegations it damaged the interest of customers, state media reported, in the first action against a U.S. company amid U.S.-China heightening tensions over trade and technology.

President Trump’s threatened tariffs on Mexico have the potential to affect as much as $360 billion in goods and would represent his biggest imposition to date of such duties on a U.S. trading partner.

The tariffs, proposed to start on June 10, would apply to all imports from Mexico, hitting sectors that previously had little exposure to the administration’s aggressive trade initiatives, including importers of autos, crude oil and fruits and vegetables, the banking industry and supply chain opperation.

• Major industries would be pulled into the trade fray. The duties would hit $34 billion of passenger cars, $34 billion of trucks and buses, $14 billion of crude oil and $14 billion of fruits and vegetables—all items that the U.S. doesn’t import at substantial volumes from China.
   
• For executives at Detroit’s Big Three auto makers, the prospect of tariffs on Mexican imports has been the most worrisome of the trade threats leveled by Mr. Trump during his presidency. Mexico-built cars accounted for 17% of Detroit auto makers’ overall U.S. sales in 2018, including some of the industry’s biggest moneymakers, large pickup trucks.
   
• Citigroup Inc. shares fell after President Trump threatened to impose new tariffs on imports from Mexico, a major market for the bank. About 7% of Citigroup’s global revenue in the first quarter came from its Mexican unit, Citibanamex, one of the country’s largest retail banks.Tariffs largely would have an indirect effect on Citigroup. If tariffs were to hurt Mexican small businesses and consumers, the bank’s sizable retail operation could suffer.
   
• Taking control of one of Mexico’s best-known exports, Corona beer, has boosted sales and profit at Constellation Brands Inc. as the pale lager steals drinkers from U.S. brands like Budweiser. But on Constellation shares fell nearly 6% amid investor fears about President Trump’s tariff threats against Mexico.
   
• Some importers have started considering moving goods more quickly into the U.S. from Mexico to get ahead of threatened new tariffs, a logistics operator said Friday, raising the prospect of a shipping surge to border crossings already marked by heavy congestion and tight trucking and warehousing capacity.
   
• Proposed U.S. tariffs on Mexican imports would impact billions of dollars of cargo moving across the border on railroads including Kansas City Southern and Union Pacific Corp.

A Delaware corporate law court has ordered Facebook Inc. to hand over records to shareholders investigating the data privacy breach that fed information to now-defunct data miner Cambridge Analytica. There is sufficient evidence that Facebook’s board of directors failed in its duty to protect data privacy to justify an expanded shareholder investigation, Joseph Slights, a vice chancellor of the Delaware Court of Chancery, ruled on Thursday.

• For Fiat Chrysler Automobiles NV and Renault SA, a possible merger could help them solve one of their biggest problems: unused plant capacity. Fiat Chrysler and Renault had the worst-performing factories in Europe last year, operating at 52% and 70% capacity, respectively, according to LMC Automotive. Meanwhile, the proposed deal is the latest jolt for Fiat-Chrysler's U.S. operations, a unit that has seen its parent company change three times in the past two decades. 
   
• Factories are on track for their weakest showing this year since 2016. Manufacturing job growth has stalled since late last year and output has fallen in three of the past four months as demand for business equipment and commodities weakens in the U.S. and abroad.

It took two months for activist investors to unseat Bed Bath & Beyond Inc.’s top officials, a drama that concluded last week when the company settled with the group. But the crisis was decades in the making.

Its leaders built a superstore for housewares, with more than 1,500 locations that had so much merchandise that products hung from the ceiling. But they were ill-equipped, former employees say, to transition to a world where consumers can access thousands of items by tapping a smartphone screen.

For the reconfigured board, which includes nine new directors, and a yet-to-be named chief executive, the biggest challenge will be to overhaul the company quickly enough.

• Tesla Inc. promised to start delivering Model 3 sedans built at its new Shanghai plant within six to 10 months—and priced them well below the imported version—as the electric-vehicle maker races to capitalize on booming Chinese demand. Getting China right, industry analysts said, is pivotal for Tesla, whose share price has halved in the past six months amid doubts about its ability to ramp up deliveries in the U.S.
   
• Infineon Technologies AG on Monday said it would buy Cypress Semiconductor Corp. for an enterprise value of €9 billion ($10.1 billion), a deal the German company said would make it the biggest supplier of chips to the automotive market.
   
• Foursquare Labs Inc., the onetime social-media darling that has transformed into a specialist in providing location data to other companies, is buying another location-data powerhouse in a bid to dominate the business of helping advertisers track foot traffic to stores.

Subscribe to The Morning Risk Report here.

Follow us on Twitter at @WSJRisk, @kcbroughton and @_MengqiSun.

Send comments to the Risk & Compliance editor, Jack Hagel, at jack.hagel@wsj.com.