Black Kite's Ransomware Susceptibility Index® Predicts Rising Ransomware Threats

• •Organizations with RSI above 0.8 are 291 times more likely to face ransomware attacks.
• •The RSI model has improved its predictive power over three years of testing.
• •High-RSI organizations consistently show elevated risk, while low-RSI organizations see reduced attack rates.

Black Kite announced findings from its Ransomware Susceptibility Index® (RSI™) indicating that organizations with high RSI scores are significantly more likely to experience ransomware attacks. The analysis evaluated 7,551 publicly disclosed ransomware victims from 2025, revealing that organizations with an RSI above 0.8 were 291 times more likely to be attacked than those with scores below 0.2. The RSI, which ranges from 0 to 1, reflects observable external risk signals and has shown increasing accuracy over three years of testing. In 2023, organizations in the high-RSI band were 27 times more likely to be attacked, which increased to 96 times in 2024. The model has consistently identified high-risk organizations while improving its precision in identifying low-risk ones. The findings emphasize the need for evidence-based scoring to assess cybersecurity posture effectively.