Mid-market ransomware victim concentration stays high as incidents rise
Trend
Summary
Hide ▲
Show ▼
Ransomware victimization remains heavily concentrated in mid-sized organizations with $10m-$1bn in revenue, keeping the mid-market in the crosshairs across North America and Europe. A study of 13,336 disclosed incidents found that 73% of attacks hit this revenue band, while total incident volume rose 44% between 2023 and 2025. Manufacturing accounted for 26% of mid-market victims, making it the most exposed sector in the dataset. The pattern aligns with persistent security-posture gaps, including known exploited vulnerabilities, patching weaknesses, and weak DMARC coverage.
Related Happenings
Ransomware victim concentration remained dominated by the top five operations
Trend
H score44
First: 21.07.2026 16:00
Last: 21.07.2026 16:00
Sources 1
About this happening:
Ransomware victimization remained concentrated across March 2025 to March 2026, with 7,551 public disclosed victims and the top five operations responsible for 44%...
Ransomware victim concentration remained dominated by the top five operations
TrendAbout this happening: Ransomware victimization remained concentrated across March 2025 to March 2026, with 7,551 public disclosed victims and the top five operations responsible for 44%...
Ransomware ecosystem fragments as new groups emerge weekly
Threat Actor Meta
H score47
First: 21.07.2026 16:00
Last: 21.07.2026 16:00
Sources 1
About this happening:
Ransomware operations are fragmenting and expanding, with more than one new group per week entering the market and increasing extortion volatility. As of June 2026...
Ransomware ecosystem fragments as new groups emerge weekly
Threat Actor MetaAbout this happening: Ransomware operations are fragmenting and expanding, with more than one new group per week entering the market and increasing extortion volatility. As of June 2026...
Ransomware attacks rise across Europe in early 2026, with manufacturing hit hardest
Trend
H score39
First: 25.06.2026 13:45
Last: 25.06.2026 13:45
Sources 1
About this happening:
Ransomware attacks rose across Europe in early 2026, increasing operational and supply-chain risk for regional organizations. Activity climbed 55.1% year-over-year and...
Ransomware attacks rise across Europe in early 2026, with manufacturing hit hardest
TrendAbout this happening: Ransomware attacks rose across Europe in early 2026, increasing operational and supply-chain risk for regional organizations. Activity climbed 55.1% year-over-year and...
Timeline
-
18.08.2026 13:00 2 articles · 1h ago
Black Kite study finds ransomware remains concentrated in mid-market firms
Initial DisclosureBlack Kite’s Mid-Market Is the Routing Target report says 73% of ransomware attacks in North America and Europe hit companies with $10m-$1bn in annual revenue. The study is based on 13,336 disclosed incidents dating back to January 2023 and a separate scan of 120,128 mid-market companies, and it says incident volume grew by 44% between 2023 and 2025. The report also says lower mid-market victim counts rose from 1391 in 2024 to 1821 in 2025, core mid-market counts rose from 970 to 1474 between 2024 and 2025, and upper mid-market counts fell from 126 in 2023 to 45 in 2025.
Show sources
- Three-quarters of Ransomware Attacks Target Mid-Market Firms — www.infosecurity-magazine.com — 18.08.2026 13:00
- Three-quarters of Ransomware Attacks Target Mid-Market Firms — www.infosecurity-magazine.com — 18.08.2026 13:00