Q2 2026 SMB Cyber Resilience Report Highlights Ransomware Risks

• •96% of ransomware victims are SMBs, highlighting their vulnerability.
• •Only 28% of organizations fully restore data after a ransomware attack.
• •5% of clients have documented recovery objectives, indicating a critical gap in preparedness.

Corporate Technologies published its Q2 2026 SMB Technology & Cyber Resilience Index, revealing that 96% of ransomware victims are small and mid-sized businesses (SMBs). The report indicates that while 90% of security leaders are confident in their recovery capabilities, only 28% of organizations affected by ransomware fully restore their data. The managed client base absorbed 9.19 billion security events, resulting in 215 verified incidents but no ransomware detonations. A significant gap remains in tested backup recovery, with only 5% of clients having documented recovery objectives. The report also notes a shift towards identity-based attacks, with 79% of ransomware incidents beginning with compromised identities. The findings are based on operational data from approximately 1,700 managed businesses, rather than self-reported surveys.