During the last one-year, organisations in Singapore faced AI-linked ransomware attacks at 1.5 times the global rate, according to Semperis’s Annual Report 2026.
The identity-driven cyber resilience and crisis management company Semperis published its 48-page 2026 Ransomware Report on 14 October 2026. According to the study, six in 10 Singapore organisations targeted by ransomware in the past year said attackers used AI, compared with 40% globally. Nearly all respondents in Singapore, or 98%, said AI featured in the attack in some way, whether used by attackers, defenders or both.
The report found that bad actors are threatening victims with psychological intimidation in nearly 25% of all attacks in the US, UK, France, Germany, Italy, Spain, Singapore, Canada and Australia.
In 53% of cases, the victims reported that the hackers followed through on their threats; 23% of victims or family members were swatted; 25% of victims sought psychological and medical treatment because of the ransomware attack; and 24% of victims or families hired personal security.
Some 42% of Singapore respondents said attackers manipulated or exploited an AI agent or system within their organisation, suggesting internal AI tools are becoming part of the attack surface. This mode of attack has been observed for the first time.
Identity systems remained central to these incidents, with 92% of ransomware attacks in Singapore targeting or exploiting identity infrastructure, above the global figure of 87%.
The report revealed that 57% of the respondents from Singapore were successfully attacked multiple times and nearly 26% paid ransom. The data analysis found that 97% of attacks targeted the identity infrastructure, 56% maintained dedicated identity backup systems and 55% automated identity system recovery.
The report identifies that cross-team communication gap is the biggest hurdle in effective crisis management and response to evolving cybersecurity threats.
Systems cited included Active Directory, Entra ID and Okta. Yet only 54% of organisations said they maintained dedicated identity backup systems, while fewer than half had automated identity system recovery.
Click Here For The Original Source.
——————————————————–
