Ransomware Pressure Moves Beyond Enterprise Systems to Theaten Employees’ Families
Ransomware attackers are exploiting enterprises’ own artificial intelligence systems and extending pressure beyond internal networks to employees and their families, according to a new Semperis survey of organizations that suffered disruptive attacks.
In a recent announcement, the company highlighted findings from its 2026 Ransomware Risk Report, which examines AI-related attack tactics, personal intimidation, and recovery preparedness. Censuswide surveyed 1,200 information technology and security professionals across nine countries and eight industry sectors in the first half of 2026.
The sample has an important limit: This year’s study included only organizations where at least one ransomware attack caused business disruption. The results describe those victims’ experiences, rather than the likelihood that an organization will suffer an attack. The report says that sampling approach changed from previous studies.
Semperis sells identity security, recovery and crisis management products.
AI Is Both a Weapon and a Target
The report says 84% of respondents experienced attacks that exploited AI in some way. Its breakdown distinguishes AI-based attacks, reported by 40%, from attacks that manipulated victims’ own AI agents or systems, reported by 44%. That distinction matters: The broader figure covers both attackers using AI and attackers exploiting AI deployed inside an organization.
Defensive use of AI also produced mixed responses. Nearly half of respondents, 49%, said they successfully used AI for detection or response, while 23% said their AI tools failed to detect or respond successfully. Those are survey responses about victimized organizations, rather than a controlled comparison of security products.
[Click on image for larger view.] AI Roles in Ransomware Attacks (source: Semperis).
Chris Inglis, former U.S. national cyber director and a Semperis strategic adviser, described the difficulty of recognizing AI’s involvement. “Many attacks are not perceived as being aided and abetted by AI because they’re just too slick, too sophisticated,” he said in the report.
Pressure Moves Beyond Enterprise Systems
Data erasure, destruction, or release remained the most frequently reported threat, at 56%. Blackmail, extortion or public shaming followed at 41%, with system lockouts or operational sabotage at 40%. The report also recorded psychological intimidation at 23% and physical threats at 17%.
[Click on image for larger view.] Threats Used to Pressure Ransomware Victims (source: Semperis).
——————————————————–
Click Here For The Original Source.
