The Ransomware Holiday Bind: Burnout or Be Vulnerable

This report describes how ransomware gangs increasingly schedule attacks during weekends and holidays to exploit reduced SOC staffing and burnout — citing surveys and industry analyses showing a high proportion of attacks occur during off-hours (e.g., 52% on weekends/holidays, >70% of encryption events outside business hours) — and recommends documented incident response plans, on-call rotations, network segregation, automation, tabletop exercises, and other measures to mitigate the elevated risk.