Semperis

12% of French companies express confidence they could regain control if AI exposes admin credentials.

74% of organizations in the U.S., U.K., France, Germany, Spain, Italy, Singapore and Australia believe AI will increase attacks on identity infrastructure.

83% of organizations indicate that AI identity governance is a priority in the coming months.

62% of organizations reduced SOC staffing on holidays and weekends to provide employees with work/life balance.

78% of companies reduced security operation center (SOC) staffing by 50% or more during holidays and weekends.

45% of identity threat detection and response (ITDR) plans included remediation procedures.

38% of companies that paid ransoms did so multiple times.

The top cybersecurity challenge facing organizations is the sophistication of attacks (37%).

The second biggest cybersecurity challenge facing organizations is attacks against organizations' identity infrastructure, most commonly Active Directory (32%).

62% of utility operators were targeted by cyberattacks in the past year.

38% of utility operators believed they had not been targeted by cyberattacks.

54% of utility operators who were targeted by cyberattacks suffered permanent corruption or destruction of data and systems.

93% of organizations already use or plan to use AI agents for sensitive security tasks such as password resets and VPN access.

92% of organizations have AI installed on at least some local machines with access to SSH and encryption keys.

Within organizations that track AI identities, 43% authenticate and authorize AI identities using a separate system from human identities.

Within organizations that track AI identities, 57% use the same system as for human identities.

29% of organizations already use AI agents to manage security-related help desk tickets including password resets and VPN access.

Only 32% of organizations globally are very confident they could regain control if AI exposes admin credentials.

53% of US companies express confidence they could regain control if AI exposes admin credentials.

65% of organizations intend to use AI agents to manage security-related help desk tickets within the next year.

65% of organizations globally say AI identities are fully registered, authenticated and authorized in a formal system.

6% of organizations admit they do not track AI identities at all.

63% of identity threat detection and response (ITDR) plans automated identity system recovery.

47% of organizations reported being closed on holidays and weekends.

52% of organizations reported being targeted by ransomware attacks on holidays or weekends.

90% of organizations reported that their identity threat detection and response (ITDR) plans detect identity system vulnerabilities.

60% of ransomware attacks occurred following an IPO, merger or acquisition, or round of layoffs.

6% of companies completely cut their security operation center (SOC) staffing during holidays and weekends.

29% of organizations did not think they would be attacked during holidays and weekends.

In the US, the rate of regulatory blackmail threats (hackers threatening to file regulatory complaints against victims if they didn't report the ransomware incident) jumped to 58%, representing a 23% increase.

47% of attacked companies across various countries (US, UK, France, Germany, Spain, Italy, Singapore, Canada, Australia, New Zealand) reported that hackers threatened to file regulatory complaints against them if they didn't report the ransomware incident.

Nearly 20% of companies that paid a ransom either received corrupt decryption keys or the hackers still published stolen data

11% of companies paid ransoms three times or more.

US-based companies experienced physical threats in 46% of ransomware attacks.

In 40% of ransomware attacks, threat actors threatened to physically harm executives at organizations that declined to pay a ransom demand.

69% of companies victimized by ransomware paid a ransom.

In the US, 47% of companies paid ransoms multiple times.

In Singapore, the extortion threat in ransomware attacks surged to 66%, a jump of 40% and the highest among the surveyed countries.

In Singapore, 50% of companies paid ransoms multiple times.

44% of German firms experienced physical forms of intimidation in ransomware attacks.

50% of respondents cited cybersecurity threats as the top threat to business resilience.

Nearly 60% of attacks against utility operators were carried out by nation-state groups

81% of cyberattacks on utilities compromise identity systems such as Active Directory, Entra ID, and Okta.

Of those utility operators targeted by cyberattacks in the past year, 80% were attacked multiple times.