Ransomware Gangs Now Threatening Employees and Their Families Physically

The Semperis 2026 Ransomware Risk Report, published October 14, documents something that should be on every business owner's and HR director's radar: ransomware gangs are no longer just locking files and demanding money. They are threatening physical harm against employees, executives, and their families to pressure companies into paying. In 40 percent of ransomware attacks studied, gangs made psychological or physical threats against staff. In more than half of those cases, the attackers followed through. Twenty-four percent of victims or family members were swatted. Twenty-five percent sought psychological or medical treatment. Twenty-four percent hired personal security. The report also found that AI was used in 84 percent of attacks, that 87 percent of ransomware attacks targeted identity systems like Active Directory, and that average ransom demands in Q3 hit $602,400. This changes what a ransomware response plan needs to look like. It's no longer just an IT problem — your people operations, security policies, and crisis communications need to account for the human dimension now.