Ransomware attackers are zeroing in on mid-market companies

Mid-sized companies with annual revenue between $10 million and $1 billion represented 73% of publicly disclosed ransomware and data-extortion incidents in North America and Europe from January 2023 through June 2026, according to analysis by Black Kite covering 13,336 incidents. This segment's share of attacks remained consistently between 72% and 75% throughout the period, indicating that ransomware operators are deliberately targeting the mid-market as a priority.