Three-quarters of Ransomware Attacks Target Mid-Market Firms

Black Kite's report "Mid-Market Is the Routing Target" analyzes 13,336 disclosed ransomware incidents since January 2023 and a security scan of 120,128 mid-market firms, finding that 73% of victims in North America and Europe had $10M–$1B in revenue, with manufacturing the most targeted sector; it also documents rising incident volume (44% growth 2023–2025) and common security deficiencies including known exploited vulnerabilities (28%), significant patching issues (55%), high-severity CVEs (48%), stealer log findings (32%), and missing/insufficient DMARC (47%).