Ransomware pressure now reaches employees’ homes and families

**Executive summary:** Semperis' 2026 Ransomware Risk Report (survey of 1,200 IT/security professionals) finds attackers increasingly leverage threats against employees and their families (doxxing, swatting, physical threats), that 87% of incidents involved compromise of identity systems (Active Directory/Entra ID/Okta), 69% of organizations experienced multiple successful attacks, and 59% paid ransoms; the report emphasizes identity backups, clear incident roles, and pre-established law enforcement relationships to improve recovery and reduce risk.