10/08/2026
88% of small and midsize business breaches involve ransomware. For large enterprises, that number is 39%.
The gap isn't because attackers prefer smaller targets. It's because ransomware is often the path of least resistance, and SMBs frequently have fewer layered defenses to slow an attacker down once they're in. Enterprises get hit with a wider variety of attack types. SMBs get hit, disproportionately, with the one that's hardest to walk back from.
This is worth internalizing for any leadership team still operating on a "we're not big enough to be a target" assumption. Size doesn't reduce the odds. It changes which type of attack is most likely to succeed.