Semperis survey flags ransomware threats beyond data theft
Semperis says 37% of ransomware incidents in its 2026 risk report involved psychological or physical threats, and some respondents said attackers went further than online extortion. The survey covers 1,200 organizations, but the most alarming claims are self-reported and were not independently verified.
The reported pressure tactics include threatening messages, stalking, doxxing, and references to victims’ families, turning ransom demands into personal coercion rather than just a payment dispute. In plain terms, the attacker’s leverage is no longer only stolen data or downtime; it can be fear of harm outside the network.
If these reports reflect what is happening in the field, ransomware response now has a personal-safety dimension for executives, employees, and families whose details were exposed. The reporting still does not prove how often the worst cases really occur, so the main takeaway is that the threat model may be shifting faster than the evidence trail.