57% of LockBit victims were organizations with 200 employees or fewer