{"schema":"postcutoff/event@1","as_of":"2026-10-16T02:16:00+02:00","url":"https://postcutoff.com/e/2026-10-14-semperis-ransomware-report-ai-84-percent/","md":"https://postcutoff.com/e/2026-10-14-semperis-ransomware-report-ai-84-percent/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-14-semperis-ransomware-report-ai-84-percent","date":"2026-10-14","date_precision":"day","short_title":"Semperis 2026 ransomware report","deck":"Attackers weaponized AI in 84% of ransomware attacks on surveyed victims","takeaway":"On Oct 14, 2026 identity-security firm Semperis published its 2026 Ransomware Risk Report, a survey of organizations hit by ransomware in the previous 12 months.","category":"policy-safety","category_label":"Policy & safety","importance":2,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":[{"n":1,"title":"Semperis press release: 2026 Ransomware Report reveals increases in AI-driven attacks and a rise in physical threats against executives and their families","url":"https://www.semperis.com/press-release/semperis-2026-ransomware-report-reveals-increases-in-ai-driven-attacks-and-a-rise-in-physical-threats-against-executives-and-their-families/","type":"official","group":"primary","domain":"semperis.com"},{"n":2,"title":"CBS News (YouTube): AI now linked to 84% of ransomware attacks, report finds","url":"https://www.youtube.com/watch?v=Yj-2j0dTxNU","type":"video","group":"reactions","domain":"youtube.com"}],"official":1,"filed":"2026-10-15","updated":"2026-10-15","orgs":["Semperis"],"title":"Semperis 2026 ransomware report: attackers weaponized AI in 84% of ransomware attacks on surveyed victims","summary":"On Oct 14, 2026 identity-security firm Semperis published its 2026 Ransomware Risk Report, a survey of organizations hit by ransomware in the previous 12 months. It says threat actors weaponized AI in 84% of attacks, 87% of attacks targeted identity systems such as Active Directory, Entra ID and Okta, and 40% involved psychological or physical threats against staff. It is a vendor survey of self-reported victims, not incident forensics, but CBS News carried it as \"AI now linked to 84% of ransomware attacks\".","key_facts":["Published Oct 14, 2026 (Semperis press release, Hoboken NJ); respondents are organizations attacked by ransomware gangs in the prior 12 months; countries named include the US, UK, France, Germany, Italy, Spain, Singapore, Canada and Australia","AI: 'threat actors weaponized AI' in 84% of attacks (press release); the release does not define what counts as AI use","Identity: 87% of ransomware attacks targeted identity systems (AD, Entra ID, Okta); only half of companies keep dedicated identity backups, and 60% of recovery plans lack identity-system recovery procedures","Threats: 40% of attacks involved psychological or physical threats against staff; 24% of victims or family members were swatted; 25% sought psychological or medical treatment","Repeat attacks: nearly 70% of victims were targeted more than once; 31% made multiple payments","Coverage: CBS News segment by homeland security correspondent Nicole Sganga, 'AI now linked to 84% of ransomware attacks, report finds' (YouTube, Oct 14; ~55k views by Oct 15)"],"key_numbers":[],"tags":["cybersecurity","ransomware","survey","identity-security"],"science":null,"body_md":"## What happened\n\nSemperis, which sells Active Directory and identity recovery tools, released its 2026 Ransomware Risk Report on October 14, 2026\n([press release](https://www.semperis.com/press-release/semperis-2026-ransomware-report-reveals-increases-in-ai-driven-attacks-and-a-rise-in-physical-threats-against-executives-and-their-families/)).\nIts headline figure is that attackers weaponized AI in 84% of the ransomware attacks reported by surveyed victims. The report also says\n87% of attacks went after identity systems and 40% involved threats against staff, up to swatting of employees' families. CBS News ran\nthe AI figure as a news segment the same day.\n\nThe press release gives no sample size or definition of \"AI use\", and secondary write-ups phrase the 84% differently (share of attacks\nvs. share of victims). Treat the number as self-reported survey data from a security vendor.\n\n## Why it matters\n\nIt is one of the first large surveys to put a number on how common AI-assisted ransomware has become in 2026, and it reached mainstream\nTV news. It sits alongside documented cases such as the South Korean bank hacks done with Chinese AI models.","disputed":[],"related":[{"id":"2026-10-06-south-korea-ai-bank-hacks","url":"https://postcutoff.com/e/2026-10-06-south-korea-ai-bank-hacks/","date":"2026-10-06","date_precision":"day","short_title":"South Korea's President Lee says AI appears to have been used in bank hacks affecting 68,000+ people; police investigate","deck":null,"takeaway":"It is one of the first times a head of state has publicly linked a wave of attacks on financial institutions to AI models.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":8,"official":1,"filed":"2026-10-06","updated":"2026-10-09","orgs":["Government of South Korea"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-15","type":"filed","text":"Created from data/leads.md; facts from the Semperis press release"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-15","run":null,"sources_read":"Data/leads.md; facts from the Semperis press release","updated":"2026-10-15","human_review":null,"version":{"date":"2026-10-15"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":167,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":106,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":197,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":136,"in_training_data":false}],"short_url":null}