Semperis survey: 37% of ransomware attacks involve psychological or physical threats against staff and families
A Semperis annual ransomware risk report, covered by The Register, finds that 37% of ransomware attacks involved psychological or physical threats against victim staff. The survey covered 1,200 post-ransomware organizations in the first half of 2026. Respondents reported psychological intimidation (23%) and physical threats (17%), aimed at executives, employees and their families. Semperis incident responder Tim Beasley said he has seen the tactic from groups such as Scattered Spider, ShinyHunters and Lapsus$. ShinyHunters told The Register they "don't attack human beings" but admit pushing corporations "to the absolute limit".
Detalhes técnicos
- 25% of victims experienced doxxing, 23% swatting, 25% sought psychological or medical treatment, and 24% hired personal security teams.
- 53% reported that attackers carried through on threats in the past year. Reported threats included texts, letters or packages (57%), threats against family or friends (37%) and physical intrusion (19%).
- Beasley described executives receiving photos of their children's schools, and a package of Russian-themed gifts that arrived during a Midnight Blizzard investigation, which he assumed came from the group. The article gives no confirmed attribution for that package.
- Beasley said he has seen "violence as a service" used. Europol and its partners flagged 4,340 URLs for removal in a crackdown on The Com, a loose network of young actors involved in hacking, swatting, extortion and physical violence.
- 69% of victims were targeted multiple times in 12 months, and 31% paid more than once.
Remediação
- Do not pay, because payment leads to repeat targeting.
- Involve law enforcement (e.g. the FBI) early when staff are under duress.
- Prepare executive and employee protection and support plans, including for doxxing and swatting.
Linha do tempo
-
Semperis survey: 37% of ransomware attacks involve psychological or physical threats against staff and families
ler a análise desta fonte ocultar
A Semperis annual ransomware risk report, covered by The Register, finds that 37% of ransomware attacks involved psychological or physical threats against victim staff. The survey covered 1,200 post-ransomware organizations in the first half of 2026. Respondents reported psychological intimidation (23%) and physical threats (17%), aimed at executives, employees and their families. Semperis incident responder Tim Beasley said he has seen the tactic from groups such as Scattered Spider, ShinyHunters and Lapsus$. ShinyHunters told The Register they "don't attack human beings" but admit pushing corporations "to the absolute limit".
Technical Details
- 25% of victims experienced doxxing, 23% swatting, 25% sought psychological or medical treatment, and 24% hired personal security teams.
- 53% reported that attackers carried through on threats in the past year. Reported threats included texts, letters or packages (57%), threats against family or friends (37%) and physical intrusion (19%).
- Beasley described executives receiving photos of their children's schools, and a package of Russian-themed gifts that arrived during a Midnight Blizzard investigation, which he assumed came from the group. The article gives no confirmed attribution for that package.
- Beasley said he has seen "violence as a service" used. Europol and its partners flagged 4,340 URLs for removal in a crackdown on The Com, a loose network of young actors involved in hacking, swatting, extortion and physical violence.
- 69% of victims were targeted multiple times in 12 months, and 31% paid more than once.
Remediation
- Do not pay, because payment leads to repeat targeting.
- Involve law enforcement (e.g. the FBI) early when staff are under duress.
- Prepare executive and employee protection and support plans, including for doxxing and swatting.