Ransomware attackers are zeroing in on mid-market companies
Overview
A recent analysis by Black Kite reveals that mid-sized companies are increasingly becoming targets for ransomware attacks. Between January 2023 and June 2026, these companies, defined as those with annual revenues between $10 million and $1 billion, accounted for 73% of all publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe. This consistent trend, showing that mid-market firms are targeted in 72% to 75% of cases during this period, indicates a shift in focus from larger enterprises to smaller businesses. The implications are significant, as these mid-sized companies often lack the extensive cybersecurity resources of larger firms, making them more vulnerable to such attacks. This trend underscores the need for improved security measures within these organizations to protect sensitive data and maintain operational integrity.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Mid-sized companies with annual revenues between $10 million and $1 billion
- Action Required: Mid-sized companies should enhance their cybersecurity measures, including employee training, regular software updates, and incident response planning.
- Timeline: Ongoing since January 2023
Original Article Summary
Mid-sized companies accounted for 73% of publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe between January 2023 and June 2026, according to Black Kite. The analysis covered 13,336 incidents with known revenue and defined mid-market companies as businesses with annual revenue between $10 million and $1 billion. Their share of incidents remained between 72% and 75% throughout the period, showing that attacks on this part of the market are … More → The post Ransomware attackers are zeroing in on mid-market companies appeared first on Help Net Security.
Impact
Mid-sized companies with annual revenues between $10 million and $1 billion
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Ongoing since January 2023
Remediation
Mid-sized companies should enhance their cybersecurity measures, including employee training, regular software updates, and incident response planning.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Ransomware.