Ransomware Attacks Target Mid-Market Firms More Than Enterprises, Black Kite Study Finds
Event summary
- Black Kite's study found 73% of ransomware attacks in North America and Europe from 2023 to H1 2026 targeted mid-market companies ($10M–$1B revenue).
- Manufacturing was the most targeted industry, representing over 25% of mid-market ransomware victims.
- More than half of mid-market ransomware victims generated less than $50M in annual revenue.
- 28.3% of mid-market organizations carried at least one known exploited vulnerability (KEV).
- Black Kite is expanding capabilities specifically for mid-market organizations.
The big picture
Black Kite's findings challenge the assumption that enterprises are the primary targets of ransomware attacks, highlighting the vulnerability of mid-market firms. This segment faces unique challenges, including limited resources and a growing regulatory burden, as larger organizations increasingly hold their suppliers accountable for security posture. The study underscores the need for scalable, cost-effective cybersecurity solutions tailored to mid-market needs.
What we're watching
- Regulatory Pressure
- Whether mid-market firms can sustain compliance with evolving regulations like the EU's NIS2 Directive and U.S. rules such as NYCRR 500 and HIPAA.
- AI Adoption
- How the widening AI gap will affect mid-market companies' ability to defend against increasingly sophisticated cyber threats.
- Market Dynamics
- The pace at which cybersecurity solutions tailored for mid-market firms will be developed and adopted.
Related topics