3 out of 5 mid-sized businesses have experienced a cyber-attack