Science & Tech · Cybersecurity · 6 hrs ago
Survey finds threats against people in 37% of ransomware attacks
A Semperis survey found threats in 37% of ransomware attacks against people working for victim organizations.
The survey covered 1,200 organizations affected by ransomware worldwide in the first half of 2026.
Respondents reported psychological intimidation in 23% of cases and physical threats in 17%.
More than half said attackers carried out threats they had made, including threatening messages, threats against family or friends, and stalking.
Some people also reported doxxing, swatting, or seeking medical or psychological help.
But the figures rely on self-reporting, and no documented case of violence carried out for a ransomware attack was found by Dark Reading, so the claims need to be treated with caution.
Cybersecurity expert Tim Beasley advised company leaders not to give in to pressure, while the survey points to personal safety as a growing concern in ransomware response.
A Semperis survey found that 37% of ransomware attacks involved psychological or physical threats against staff.
The survey covered 1,200 organizations that had experienced ransomware, and more than half of respondents said attackers carried out threats.
Reported threats included messages or packages, threats against family and friends, physical intrusion, abduction, bodily harm and stalking.
Dark Reading cautioned that the survey relied on self-reporting and said it could not find a documented case of violence carried out for a ransomware attack.
- Who
- Ransomware attackers threatened staff, executives and their families. The survey was conducted by Semperis.
- What
- A survey found psychological or physical threats in 37% of ransomware attacks.
- When
- The report was published on October 14, 2026. The survey was conducted during the first half of the year.
- Where
- The survey covered organizations globally.
- Why
- The threats were used to pressure victims into paying extortion demands.
Semperis
Dark Reading
Survey findings
Semperis
Semperis’s survey found that ransomware attackers made psychological or physical threats and that more than half of respondents said attackers carried through on threats.
Dark Reading
Dark Reading said the survey relied on self-reporting and could not corroborate the figures.
Evidence of violence
Semperis
Semperis’s director of incident response said physical harm does happen in some form.
Dark Reading
Dark Reading said it could not find a documented case of violence carried out in service of a ransomware attack.
Semperis began asking survey participants about physical threats in its annual report, and 40% said they had received such threats.
Semperis conducted its survey of 1,200 organizations that had experienced ransomware.
The Register and Dark Reading published reports on the survey findings.
- Threats reported
- 37% of ransomware attacks involved psychological or physical threats against staff
- Survey size
- 1,200 post-ransomware organizations
- Psychological intimidation
- 23% of respondents
- Physical threats
- 17% of respondents
- Threats carried out
- 53% of respondents said attackers carried through on threats
- Common threat
- 57% of those reporting threats received threatening texts, letters or packages
3 sources
What people are saying
We’ve seen violence as a service get used
Yes. In some way, shape, or form, it does happen.