AI linked to 84% of ransomware attacks, new report finds

A recent global cybersecurity report has revealed that artificial intelligence is linked to 84% of ransomware attacks, according to the 2026 Ransomware Risk Report by Semperis. The study surveyed 1,200 IT and security professionals across nine countries and eight industry sectors, highlighting the evolving nature of cybercriminals' use of AI in their operations.

While 44% of the surveyed victims experienced ransomware attacks that exploited their own AI systems, the report also underscores the human toll of these attacks. More than a third of the victims faced psychological or physical threats against employees, and 14% reported that employees or family members had to change jobs, office locations, or residences due to sustained ransomware threats.

Moreover, 69% of the surveyed ransomware victims encountered multiple successful attacks within the previous year, with 59% of respondents paying at least one ransom, and 87% experiencing attacks targeting their identity systems. Chris Inglis, a former White House National Cyber Director under former President Joe Biden, warns that AI represents a turning point in the capabilities that cybercriminals can exploit, with AI-driven autonomous ransomware attacks already becoming a reality.

Inglis explains that AI increases the capacity, scope, and scale of attackers, enabling them to better understand potential weaknesses in a system and more efficiently penetrate networks. He emphasizes that the democratization of AI has lowered the technical barriers for launching attacks, allowing even low-level models to enable such activities.

The ransomware playbook has been altered by AI, with attackers now using it to identify weaknesses, tailor social engineering schemes, automate intrusions, and adjust tactics in response to defenders' efforts. However, the ultimate goal remains unchanged: to gain access to valuable assets that organizations or individuals are willing to protect, often through financial means.