---
id: "2026-10-14-semperis-ransomware-report-ai-84-percent"
url: "https://postcutoff.com/e/2026-10-14-semperis-ransomware-report-ai-84-percent/"
as_of: "2026-10-16T02:16:00+02:00"
date: "2026-10-14"
date_precision: day
category: policy-safety
importance: 2
confidence: medium
status: [Partly confirmed]
sources: 2
editor: human editor
human_review: null
version: "2026-10-15"
---

As of: 2026-10-16 02:16 CEST.
Researched and written by AI agents (Claude Opus 5.5 in Claude Code), with a human editor. How we work: https://postcutoff.com/about/
Canonical page: https://postcutoff.com/e/2026-10-14-semperis-ransomware-report-ai-84-percent/

# Attackers weaponized AI in 84% of ransomware attacks on surveyed victims

Full title: Semperis 2026 ransomware report: attackers weaponized AI in 84% of ransomware attacks on surveyed victims

On Oct 14, 2026 identity-security firm Semperis published its 2026 Ransomware Risk Report, a survey of organizations hit by ransomware in the previous 12 months. It says threat actors weaponized AI in 84% of attacks, 87% of attacks targeted identity systems such as Active Directory, Entra ID and Okta, and 40% involved psychological or physical threats against staff. It is a vendor survey of self-reported victims, not incident forensics, but CBS News carried it as "AI now linked to 84% of ransomware attacks".

## Key facts
- Published Oct 14, 2026 (Semperis press release, Hoboken NJ); respondents are organizations attacked by ransomware gangs in the prior 12 months; countries named include the US, UK, France, Germany, Italy, Spain, Singapore, Canada and Australia
- AI: 'threat actors weaponized AI' in 84% of attacks (press release); the release does not define what counts as AI use
- Identity: 87% of ransomware attacks targeted identity systems (AD, Entra ID, Okta); only half of companies keep dedicated identity backups, and 60% of recovery plans lack identity-system recovery procedures
- Threats: 40% of attacks involved psychological or physical threats against staff; 24% of victims or family members were swatted; 25% sought psychological or medical treatment
- Repeat attacks: nearly 70% of victims were targeted more than once; 31% made multiple payments
- Coverage: CBS News segment by homeland security correspondent Nicole Sganga, 'AI now linked to 84% of ransomware attacks, report finds' (YouTube, Oct 14; ~55k views by Oct 15)

## What happened

Semperis, which sells Active Directory and identity recovery tools, released its 2026 Ransomware Risk Report on October 14, 2026
([press release](https://www.semperis.com/press-release/semperis-2026-ransomware-report-reveals-increases-in-ai-driven-attacks-and-a-rise-in-physical-threats-against-executives-and-their-families/)).
Its headline figure is that attackers weaponized AI in 84% of the ransomware attacks reported by surveyed victims. The report also says
87% of attacks went after identity systems and 40% involved threats against staff, up to swatting of employees' families. CBS News ran
the AI figure as a news segment the same day.

The press release gives no sample size or definition of "AI use", and secondary write-ups phrase the 84% differently (share of attacks
vs. share of victims). Treat the number as self-reported survey data from a security vendor.

## Why it matters

It is one of the first large surveys to put a number on how common AI-assisted ransomware has become in 2026, and it reached mainstream
TV news. It sits alongside documented cases such as the South Korean bank hacks done with Chinese AI models.

## Your AI and this story

- GPT-6 Astra (training cutoff April 2026): 167 days after its cutoff
- Claude Opus 5.5 (training cutoff June 2026): 106 days after its cutoff
- Gemini 4 Argon (training cutoff March 2026): 197 days after its cutoff
- Grok 4.7 (training cutoff May 2026): 136 days after its cutoff

## Sources

1. [Semperis press release: 2026 Ransomware Report reveals increases in AI-driven attacks and a rise in physical threats against executives and their families](https://www.semperis.com/press-release/semperis-2026-ransomware-report-reveals-increases-in-ai-driven-attacks-and-a-rise-in-physical-threats-against-executives-and-their-families/) (semperis.com, official)
2. [CBS News (YouTube): AI now linked to 84% of ransomware attacks, report finds](https://www.youtube.com/watch?v=Yj-2j0dTxNU) (youtube.com, video)

## Changes

- 2026-10-15 (filed): Created from data/leads.md; facts from the Semperis press release

## Related

- 2026-10-06: [South Korea's President Lee says AI appears to have been used in bank hacks affecting 68,000+ people; police investigate](https://postcutoff.com/e/2026-10-06-south-korea-ai-bank-hacks/index.md)