Nearly 1 in 4 middle market organizations reported a ransomware attack or demand in the past year.

The average initial ransomware demand increased 70% to $4.2 million compared to the previous year.

A record 86% of businesses refused to pay ransom demands.

Initial ransom demands surged 47% year-over-year in 2025.