Cyber

What changed

A new report highlights a disturbing shift in ransomware tactics, where attackers are increasingly using threats of physical violence against employees to compel organizations to pay ransoms. This escalation in intimidation tactics marks a significant change in the landscape of cyber extortion.

The report underscores the evolving nature of ransomware attacks, indicating that traditional methods of coercion are being supplemented with more aggressive and threatening approaches.

Who is affected

Organizations across various sectors are at risk as ransomware gangs adapt their strategies. This trend poses a serious threat to employee safety and organizational integrity.

Companies that have previously been targeted by ransomware are particularly vulnerable, as attackers may leverage past incidents to escalate threats.

• Businesses in the healthcare sector, where patient data is critical.
• Financial institutions that manage sensitive customer information.
• Manufacturing companies with operational dependencies on technology.
• Public sector organizations that may face heightened scrutiny and pressure.

What to do

Organizations should enhance their security protocols and employee training to mitigate the risks associated with ransomware attacks. It is crucial to develop a comprehensive incident response plan that includes measures for dealing with threats of violence.

Regular risk assessments and updates to security infrastructure can help in identifying vulnerabilities that may be exploited by ransomware gangs.

• Implement robust cybersecurity measures to protect sensitive data.
• Conduct regular training sessions for employees on recognizing and responding to threats.
• Establish clear communication channels for reporting threats or suspicious activities.
• Collaborate with law enforcement and cybersecurity experts to develop a proactive response strategy.

What changed

Recent reports indicate a troubling trend in ransomware attacks, where criminals are not only locking files and stealing data but are now also threatening employees and their families to compel organizations to pay ransoms. This shift in tactics highlights the evolving nature of cyber threats and the lengths to which attackers will go to achieve their objectives.

The Semperis 2026 Ransomware Risk Report reveals that 37% of successful ransomware attacks involved threats directed at the friends or relatives of employees, underscoring the need for enhanced security measures and employee awareness.

Who is affected

This alarming trend affects a wide range of organizations across various sectors, particularly those with valuable data or critical operations. The following groups are particularly vulnerable:

Companies with significant employee bases are at risk, especially in industries such as healthcare, finance, and technology.

• Healthcare providers managing sensitive patient data.
• Financial institutions handling large volumes of transactions.
• Technology firms with proprietary information and intellectual property.
• Government agencies that may be targeted for sensitive information.

What to do

Organizations must take proactive steps to mitigate the risks associated with these evolving ransomware tactics. This includes implementing robust security protocols and enhancing employee training to recognize and respond to threats.

Additionally, companies should consider developing comprehensive incident response plans that address the potential for threats against employees and their families.

• Conduct regular security training sessions for employees to raise awareness about ransomware threats.
• Implement multi-factor authentication and strong access controls to protect sensitive data.
• Establish a clear communication plan for employees in the event of a ransomware attack.
• Engage with cybersecurity experts to evaluate and strengthen your organization's defenses.