Construction is the number-one industry targeted by ransomware attacks, according to a NordLocker analysis of 1,200 companies in 35 industries around the world that were the victims of cyber extortion between 2020 and 2021.

Construction businesses could be particularly enticing to cyber racketeers because of the core processes that steer the industry, such as proliferation of mobile devices and predictable schedules, NordLocker reports. And even though big companies might seem like an obvious target because they’re more likely to offer hackers sizable ransoms, small companies aren’t safe either. The nearly 100 construction companies covered in the NordLocker study ranged from firms worth $20 billion to family-owned enterprises.

Recommendations for protecting against ransomware include:

• Making sure employees use strong and unique passwords;
• Training staff to identify signs of phishing;
• Implementing a periodic data backup and restoration processes; and
• Adopting a zero-trust network access.