According to a study by SurfShark, as reported by Security, more than 5.6 million Russian internet users’ accounts were breached from January to March 2022, the most of any country. The U.S. was second, with about 2.5 million user accounts breached.

Russian breaches have jumped since the Ukraine invasion, according to SurfShark, while affected U.S. users have fallen since the end of 2021. The next most-breached countries, in order, were Poland, France and India.

If the business world were a nation, it would seem to have its share of breaches, as well. As TechRadar reports, citing a survey by Splunk, about half of businesses indicated that they were hit by a cyberattack in the past few years, with an average price tag of nearly $3 million per attack.

More specifically, of 1,200 security leaders from nearly a dozen countries, 49% said they suffered a data breach in the last two years. Plus, 79% said their endpoints were hit by a ransomware attack, and 35% said that at least one of these incidents disrupted operations.

Companies aren’t taking all of this hacking lying down. According to a recent survey by the Conference Board, almost 40% of organizations polled said that they planned to boost financial resources to better mitigate cyberattacks. More than two-thirds of the 37 risk, strategy and crisis management executives responding indicated that their organizations were ready for the elevated risk of a cybersecurity incident.

“Judging from our poll, warnings of a looming Digital 9/11 or a Cyber Pearl Harbor—apocalyptic and hopelessly complex threats for which both countries and companies are, if not defenseless, at least woefully underprepared—presents a one-sided picture,” the Conference Board noted in a blog post.