Mid-sized businesses lose more to cybercrime than large or small ones, says report