Security firm Semperis published its yearly ransomware report on October 14. It surveyed only firms hit by ransomware in the past 12 months. Semperis said four in ten attacks included mental or physical threats against staff. Victims said the gangs followed through in 53% of cases. Semperis also said 24% of victims or their families were swatted, meaning a false emergency call sends police to a home.
Infosecurity Magazine reported that such threats could push a firm to pay even when it is confident it could restore from backups. The survey does not measure whether threats led firms to pay. Semperis found 59% of firms paid, down from 69% a year earlier. Dark Reading said the claims are hard to verify. Semperis sells identity security.
Backups answer a technical problem, while threats against people are a separate pressure. An identity system holds the accounts and access rights that decide who can log in. Semperis said only about half of firms keep a dedicated identity backup, and 60% of crisis plans lack identity recovery steps. Restored files help little if staff cannot sign in. A budget signer can ask three things. Does our plan cover identity recovery? Has it been tested? Who supports staff who are threatened?