AI Drives 84% of Ransomware Attacks as Physical Threats Escalate

Key points

• The 2026 Ransomware Risk Report by Semperis surveyed 1,200 IT professionals across nine countries, finding that AI was used in 84% of attacks.
• 44% of victims reported that attackers exploited their own internal AI agents or systems to gain unauthorized access.
• 69% of surveyed organizations faced multiple successful attacks in the past year, while 59% paid a ransom at least once.
• Over one-third of victims faced psychological or physical threats, with 14% reporting employees or family members forced to change jobs or residences.
• Former White House National Cyber Director Chris Inglis warned that AI is enabling 'autonomous ransomware attacks' by lowering technical barriers for criminals.

Background

This development follows a broader trend of increasing cyber threats in 2026, including a 250% rise in FBI complaints involving threats of violence in online attacks. While previous reports focused on digital extortion, the current landscape shows a shift toward hybrid threats that combine digital intrusion with physical intimidation.

How outlets are covering it

CBS News emphasizes the technical shift, noting that AI allows even low-level criminals to launch sophisticated attacks and that 87% of victims saw their identity systems targeted. Dark Reading focuses on the human toll, highlighting that 53% of victims reported attackers carrying out physical threats, though it notes a lack of documented cases of actual violence. The Register provides minimal detail, primarily focusing on the broader context of AI in cybersecurity. There is a slight discrepancy in threat statistics: CBS cites 'more than a third' facing threats, while Dark Reading breaks this down into 17% physical and 23% psychological threats, suggesting varying definitions or survey methodologies.

Why it matters

The integration of AI into ransomware operations significantly lowers the barrier for cybercriminals, potentially leading to a surge in autonomous attacks. Furthermore, the escalation of physical threats against employees and their families indicates that ransomware is no longer just a digital issue but a direct risk to personal safety, requiring organizations to rethink their security and crisis management strategies.

What to watch

Organizations are expected to increase investment in AI-driven defensive tools to counter automated attacks. Regulators and law enforcement may need to address the growing trend of physical threats associated with cyber extortion, potentially leading to new legal frameworks or increased police involvement in ransomware negotiations.