Official dataAll sizesUSA
3,611
ransomware complaints filed with the FBI in 2025, with $32.3 million in reported losses that exclude downtime and recovery
Vendor dataUpdated 23 Oct 2026
96%of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees)
96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees) (Nov 2024 to Oct 2025, Verizon Business, Data Breach Investigations Report (DBIR))
Vendor dataChecked at source, 23 Oct 2026SmallGlobalCyber security · Ransomware
In plain words
What this number really says
96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees) (Nov 2024 to Oct 2025).
96%
the latest figure (Nov 2024 to Oct 2025)
Small
company size covered
Vendor data
type of source
Why you can trust it. Verizon Business, Data Breach Investigations Report (DBIR): vendor data, a company measuring its own customers or panel.
Key facts
- Period Nov 2024 to Oct 2025
- Region Global
- Company size Small
- Next data 31 May 2027
Source: Verizon Business, Data Breach Investigations Report (DBIR), Nov 2024 to Oct 2025
Method and use
How it was measured, and how to use it
How it was measured
- Publisher
- Verizon Business, Data Breach Investigations Report (DBIR)
- Source type
- Vendor data: A company measuring its own customers or panel
- What it measures
- 96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees)
- Data period
- Nov 2024 to Oct 2025 (ends 31 Oct 2025)
- Published by the source
- 19 May 2026
- In the source's words
Of the Ransomware cases where we have information on the organization size, we found that about 96% of Ransomware victims were SMBs.
- Checked at source
- 23 Oct 2026: Read in the Verizon 2026 DBIR PDF on verizon.com. SMB section p.98. DBIR defines SMB as fewer than 1,000 employees. New stat.
- Reuse
- Copyright Verizon. Statistics may be cited as "Verizon 2026 Data Breach Investigations Report" if not modified.. Verizon allows citing statistics unmodified with the citation above and a link to verizon.com/dbir; paraphrasing requires their review; pie charts from DBIR data are forbidden. Use bar, column or table only.
- Next expected update
- 31 May 2027 (Verizon Business, yearly, spring)
- Original page
- www.verizon.com: Data Breach Investigations Report (DBIR)
- Data files
- CSV · JSON (stable links)
Full change log
No changes recorded yet. First checked at the source on 23 Oct 2026.
Cite this number
APA
Verizon Business. (2026). 96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees). Via digitaltreed, https://digitaltreed.com/statistics/cybersecurity/ransomware-victims-that-are-smb
MLA
"96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees)." Verizon Business, Data Breach Investigations Report (DBIR), Nov 2024 to Oct 2025. digitaltreed, https://digitaltreed.com/statistics/cybersecurity/ransomware-victims-that-are-smb.
HTML link
<a href="https://digitaltreed.com/statistics/cybersecurity/ransomware-victims-that-are-smb">96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees)</a> (Verizon Business, Nov 2024 to Oct 2025)
Embed the chart
This stat has no chart to embed yet. Link to this page instead: https://digitaltreed.com/statistics/cybersecurity/ransomware-victims-that-are-smb
FAQ
Questions about this number
What is the latest figure for ransomware (Global)?
96% of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees), for Nov 2024 to Oct 2025, according to Verizon Business, Data Breach Investigations Report (DBIR). We checked it at the source on 23 Oct 2026.
Put this number to work
We help small and mid-size firms turn data like this into useful content, answers for customers and visibility in AI search.
Every number on this page was checked at its original source. Free to cite with a link to this page.