Ransomware gangs are now going after employees and their families

Ransomware used to be a computer problem: criminals lock your files and demand money to unlock them. A new report shows it’s turning into a personal one, with attackers pressuring employees and their families directly.

How the pressure works

According to the report, attackers dig through social media, leaked data, public records and company websites to find out where employees live, who their relatives are, even which schools their kids attend. Then they use those details to make threats feel real. Among organizations surveyed:

• About a quarter had employees doxxed, meaning their private details were posted online.
• About 23% faced swatting, a fake emergency call meant to send armed police to someone’s home.
• Some reported threats of break-ins (19%), abduction (17%) or physical harm (13%).
• A quarter said someone needed medical or mental health care afterward, and 24% hired personal security.

The attacks are getting smarter, too

Some 84% of victims said the attacks against them involved AI in some way, though the researchers note that’s based on what victims reported. And 87% of attacks went after identity systems, the accounts and logins that control who can access what. Only half of the organizations had a dedicated backup of those systems.

Paying doesn’t end the problem: 69% of victims were hit more than once. The FBI doesn’t support paying ransoms, since there’s no guarantee you get anything back and the money funds the next attack.

What a small business can do

You don’t need a giant security budget to make yourself a much harder target:

• Turn on multi-factor authentication for email, banking and every admin account. This one step blocks a huge share of break-ins.
• Keep backups offline and test them. A backup you have never restored is a hope, not a plan.
• Limit admin access to the few people who truly need it.
• Agree on an emergency contact method outside of company email, like a phone tree, in case your systems are down or being watched.
• Talk to your staff. Make it easy and blame-free to report a strange call, text or message, at work or at home.
• Trim what’s public. Review what your website and social pages reveal about employees.

If you’re ever hit, disconnect affected computers, don’t wipe anything, and report it to the FBI or CISA.

Need a hand with this at home or at work? HD Technologies sets up, secures and supports Wi-Fi, computers and networks for homes and small businesses. Email us at [email protected].

Source: Cyber Security News on the Semperis 2026 Ransomware Risk Report.