#United States #Boston #Cyber Risk #Ransomware #Black Kite

Black Kite's Latest Report Highlights Ransomware Threat to Mid-Market Companies

Black Kite, a prominent player in third-party cyber risk management, has released an insightful report titled "Mid-Market Is the Routine Target: Ransomware, Third-Party Risk, and the Widening AI Gap." This gripping study reveals alarming statistics regarding ransomware incidents from January 2023 to June 2026. Notably, it found that a staggering 73% of ransomware attacks in North America and Europe primarily target mid-market companies, defined as businesses with annual revenues between $10 million and $1 billion.

Key Findings from the Report

The report provides an exhaustive analysis based on 13,336 ransomware incidents, exposing an ongoing trend consistent over the years. Specifically, 74.6% of affected organizations in 2023, 72.1% in 2024, 74% in 2025, and 72.3% in the first half of 2026 were mid-market companies. This trend remained steadfast even amidst a sharp increase in absolute ransomware incidents, which grew by 44%, rising from 2,320 cases in 2023 to 3,340 in 2025.

A Closer Look at the Victims

Among the mid-market victims, more than half reported annual revenues of less than $50 million. The manufacturing sector emerged as the most frequently targeted industry, constituting over 25% of all mid-market ransomware victims. This was followed by sectors like professional and scientific services, and construction. Alarmingly, the report also highlighted that:

• - 28.3% of mid-market organizations were found to have at least one known exploited vulnerability (KEV).
• - 54.7% identified significant patch management issues on public-facing software.
• - 48.1% of these organizations carried at least one disclosed vulnerability rated with a CVSS score of 8.0 or higher.
• - Additionally, nearly 32.3% had at least one stealer log finding, and 46.8% were found to lack sufficient DMARC protection.

Why Are Mid-Market Companies So Vulnerable?

The pressure on mid-market firms continues to escalate as they grapple with not only increased ransomware attacks but also vulnerabilities stemming from their extensive use of third-party vendors. The confluence of these risks emphasizes the need for continuous visibility and rapid response systems, which often strains the capabilities of even well-resourced security teams. Furthermore, regulatory frameworks are tightening, with laws like the EU's NIS2 Directive placing significant security responsibilities on buyers to ensure the safety of their suppliers, further intensifying stresses on these mid-market players.

The AI Factor: A Growing Divide

Artificial Intelligence is transforming cybersecurity; however, it is also highlighted in the report as a double-edged sword. It accelerates the discovery of software vulnerabilities, benefitting both defenders and attackers. Unfortunately, many mid-market firms lag in adopting AI technologies for security purposes. As per the 2025 Cybersecurity Workforce Study by ISC2, a mere 20% of mid-sized organizations have begun to integrate AI tools into their security operations, a stark contrast to larger enterprises that can afford more sophisticated defenses.

A Call to Action for Mid-Market Firms

The report's findings are clear: mid-market exposure to ransomware is significant, and organizations are obligated to address it despite their limited capacities. To support these businesses, Black Kite is offering a complimentary Ransomware Susceptibility Index (RSI™) Briefing, which helps organizations assess their vulnerability against ransomware threats. This briefing includes:

• - An organization-specific Ransomware Susceptibility Index (RSI™)
• - Key findings influencing ransomware risk specific to each organization
• - Peer comparisons to understand posture within the industry
• - Prioritized recommendations for mitigating cyber risks

Companies interested in the RSI™ Briefing can request it through Black Kite's website. For organizations wishing to delve deeper, ongoing access to Black Kite's intelligence, including RSI™, FocusTags®, and Digital Breach Intelligence (DBI), can be obtained. This can enable further integration of AI into their security programs using Black Kite's innovative AI Agent, managed either directly or via a trusted Managed Security Service Provider (MSSP).

Conclusion

The Mid-Market Ransomware Report from Black Kite underscores an urgent need for businesses in this segment to enhance their cybersecurity posture. As ransomware threats evolve, organizations must act decisively to protect themselves against one of the most pressing challenges in the cyber landscape today. To read the comprehensive report, visit here.

• ---

About Black Kite

Black Kite is at the forefront of third-party cyber risk management, utilizing AI to deliver essential risk intelligence that informs connected defense strategies. They empower organizations to identify risk sooner, respond quicker, and transition from isolated defenses to a more resilient collective strategy.

To learn more, explore Black Kite's website.