The ransomware threat landscape continues to evolve, with AI taking a pivotal role and attackers expanding the scope of their threats beyond the business and into the personal realm. However, one core truth is unchanged: Identity is still a top attack target, and too few organizations are prepared to quickly recover the identity infrastructure to a secure state.
Semperis’ 2026 Ransomware Risk Report studies organizations that experienced at least one successful ransomware attack. This year’s report provides visibility into the state of ransomware and related risks to both business continuity and employee well-being. We synthesize responses to provide a candid and detailed exploration of interconnected factors including AI’s involvement in threat escalation and attack timing, frequency, and payment trends; attacker tactics; operational resilience levels; and crisis management challenges. Drawing on this data and insights and experiences from real-world engagements, our experts provide insights and recommendations for strengthening ransomware preparedness.
