Ransomware attackers are zeroing in on mid-market companies
Black Kite found mid-market firms were 73% of disclosed ransomware victims in North America and Europe from January 2023 to June 2026.
Black Kite analyzed 13,336 publicly disclosed ransomware and data-extortion incidents with known revenue between January 2023 and June 2026, finding mid-market companies (annual revenue $10M-$1B) accounted for 73% of victims in North America and Europe, consistently between 72% and 75%. Manufacturing was the most affected sector, followed by professional, scientific, and technical services and construction. Of more than 120,000 assessed mid-market organizations, 54.7% had at least one significant patch-management issue on a public-facing system, over a quarter had a known-exploited vulnerability, and nearly one-third had stealer-log credential findings.
- 73% of disclosed ransomware/extortion incidents with known revenue hit mid-market firms; manufacturing most affected.
- 54.7% of 120,000+ assessed mid-market organizations had patch-management issues on public-facing systems.
- Nearly one-third of monitored organizations had stealer-log findings indicating compromised credentials.
- Typical vendor-risk teams of two people manage 300+ suppliers, straining third-party oversight.
- NIS2, NYCRR 500, and HIPAA push more security disclosure demands onto mid-sized vendors.
- Vendors
- Black Kite
From the original article
3 min read at helpnetsecurity.com
Mid-sized companies accounted for 73% of publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe between January 2023 and June 2026, according to Black Kite. The analysis covered 13,336 incidents with known revenue and defined mid-market companies as businesses with annual revenue between $10 million and $1 billion.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.