Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Semperis survey finds 37% of successful ransomware attacks included threats against employees' friends or relatives.
A Semperis 2026 Ransomware Risk Report says extortion increasingly targets employees and their families, not only encrypted files and stolen data. The survey covered 1,200 IT and security professionals at organizations hit by successful ransomware attacks in the prior 12 months, across nine countries and eight sectors in the first half of 2026. Thirty-seven percent said attacks included threats against workers’ friends or relatives, 57% reported threatening texts, letters, or packages, and respondents said threats were carried out in 53% of cases. Reported impacts included doxxing in 25% of organizations, swatting in 23%, and medical or mental-health care in 25%.
- Semperis surveyed 1,200 professionals from organizations hit by ransomware.
- 37% of successful attacks included threats against friends or relatives.
- 57% reported threatening messages; 53% said threats were carried out.
- Impacts included doxxing, swatting, medical care, and personal security hires.
Full article622 words · extracted from databreaches.net · click to collapse
The Office of Inadequate Security
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Posted on October 15, 2026 by Dissent
Guru Baran reports:
Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay.
According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives.
The findings show that ransomware is no longer only a technical crisis. It can become a real safety and mental health emergency.
Semperis surveyed 1,200 IT and security professionals from organizations hit by successful ransomware attacks during the previous 12 months. The study covered nine countries and eight sectors during the first half of 2026.
Among respondents, 57% reported threatening texts, letters, or packages. Another 19% faced threats of physical intrusion, 17% reported threats of abduction, and 13% saw threats of bodily harm.
Attackers carried out their threats in 53% of reported cases, according to the survey. The personal impact was severe. One quarter of affected organizations said employees or family members were doxxed, meaning private details were exposed online.
