Small and mid-sized businesses increasingly face the same cyber security risks as larger companies, but only 28 percent rate their ability to mitigate threats, vulnerabilities, and attacks as “highly effective,” according to a study by the Ponemon Institute.

The report, sponsored by security company Keeper Security, is based on interviews with 1,045 IT and security practitioners from companies in the U.S. and U.K. in July 2018. Respondents represented companies with employees ranging from 100 to 1,000.

The number of attacks, including phishing, advanced malware/zero day, and ransomware is rising, with 67 percent of the companies experiencing a cyber attack and 58 percent experiencing a data breach in the last 12 months. Yet nearly half of respondents (47 percent) said they have no understanding of how to protect their companies against cyber attacks.