Ransomware groups target staff families in forty percent of attacks

Ransomware groups are increasingly targeting company staff and their families with physical and psychological threats to enforce ransom payments. Shattered.io reported that forty percent of analyzed ransomware attacks involved personal harassment against employees, marking a dangerous shift in extortion tactics. [1]

The findings come from the Semperis 2026 Ransomware Risk Report, which surveyed 1,200 organizations worldwide that suffered a ransomware attack during the first half of 2026. Shattered.io reported that extortion tactics now include stalking, threats of abduction, and direct intimidation aimed at pressuring victimized firms to pay. [1]

Ransomware is malware that takes private data hostage through encryption or exfiltration until a victim pays a ransom. Extortion groups typically demand payment via cryptocurrency or stored-value cards to avoid detection by law enforcement. [3]

Organizations can sometimes recover stolen or encrypted files without paying when ransomware contains implementation mistakes, leaked cryptographic keys, or lacks proper encryption. Security teams face growing pressure to protect both critical network infrastructure and personnel from escalating personal intimidation campaigns. [1][3]