Report by Semperis

Ransomware Targets Times of Distraction

10 FINDINGSPublished Nov 24, 2025
View Original Report →

Key Findings

45% of identity threat detection and response (ITDR) plans included remediation procedures.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
ITDRRemediation procedures

62% of organizations reduced SOC staffing on holidays and weekends to provide employees with work/life balance.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
SOCHolidaysWeekends

6% of companies completely cut their security operation center (SOC) staffing during holidays and weekends.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
SOCHolidaysWeekends

29% of organizations did not think they would be attacked during holidays and weekends.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
HolidaysWeekends

52% of organizations reported being targeted by ransomware attacks on holidays or weekends.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
RansomwareHolidaysWeekends

78% of companies reduced security operation center (SOC) staffing by 50% or more during holidays and weekends.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
SOCHolidaysWeekends

63% of identity threat detection and response (ITDR) plans automated identity system recovery.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
ITDRIdentity system recoveryAutomation

60% of ransomware attacks occurred following an IPO, merger or acquisition, or round of layoffs.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
RansomwareIPOMergerAcquisitionLayoffs

47% of organizations reported being closed on holidays and weekends.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
HolidaysWeekends

90% of organizations reported that their identity threat detection and response (ITDR) plans detect identity system vulnerabilities.

SemperisRansomware Targets Times of Distraction ·Nov 24, 2025
ITDRIdentity system vulnerabilities