71% of ransomware attacks targeted small businesses, with an average ransom demand of $116,324 and a median of $10,310. The highest ransom demanded from its insureds was $8.5 million or 3,000 Bitcoin, while the highest ransom paid by one of its clients was of $935,000. Small businesses that do not lockdown Remote Desktop Protocol (RDP) are at higher risk of being attacked. Healthcare (34%), professional services (12%), and financial institutions (12%) were the top three organizations who experienced this type of incident.
Source: https://www.bleepingcomputer.com/news/security/70-percent-of-ransomware-attacks-targeted-smbs-bec-attacks-increased-by-130-percent/