New report reveals human impact of cyberattacks
Cyberattacks in Singapore have become more personal as a new report found that attackers directly went after employees, even their families and friends.
The 2026 Ransomware Risk Report from crisis response firm Semperis showed how cyberattacks are changing in Singapore in the wake of growing artificial intelligence (AI) adoption.
It revealed that attackers are increasingly threatening to victimise companies' staff and their families. More than half of Singapore firms (56%) said threatening texts, letters, or packages were sent to their workers' home or office.
Another 41% reported threats against family members or friends, while 14% reported threats of abduction.
Overall, 66% of Singapore organisations said hackers threatened to file regulatory complaints against them if incidents went unreported, according to the report.
Nearly half (47%) of the threats were blackmail, extortion, or public shaming, followed by system lockouts or operational sabotage (37%).
Mickey Bresman, CEO at Semperis, said the findings indicate that the bad guys are "always evolving their tactics."
"When the initial wave of ransomware attacks began, most focused in data encryption. Then, after data backup and recovery systems started gaining traction and enabling companies to resist ransom demands, we saw the double extortion: encryption coupled with data theft and threats to expose or sell that data," Bresman said.
"So, it makes sense that we'll continue to see attackers trying to find more ways to make victims pay."
The use of AI in ransomware attacks
The findings come in the wake of growing AI use in ransomware attacks, with 98% of firms saying the technology was involved in the attack in some way, whether on the attacker's side, the defender's side, or both.
Some 42% of firms also said their attackers manipulated or exploited an AI agent or system inside their organisation.
Nearly half (49%) said AI was successful in detecting or responding to the attack, while 28% said their AI tools in place failed or only partly worked.
Cyberattacks resulted in temporary disruption for more than half of organisations targeted (52%), according to the findings. They also resulted in data theft (25%), reputational damage (28%), as well as fines and lawsuits (18%).
The cyberattacks also had a human impact, such as layoffs, resignations, or dismissals (18%).
Employers also reported that their staff were doxxed (15%) and swatted (15%), while some were forced to move from job, office or home (16%) and required medical or psychological treatment (8%).
What is the role of HR?
Gerry Sillars, Vice President, Asia Pacific and Japan, Semperis, said their findings show that cyber risk is no longer limited to the attackers' hands as attackers manipulate AI agents.
"Organisations need to treat their own AI agents as part of the attack surface, with the same identity controls, permissions, and monitoring as any privileged account," Sillars said.
"Organisations should back up and rehearse recovery of the identity layer as well as data and applications, and build staff safety and law-enforcement contact into their crisis plans. Regular tabletop exercises are the quickest way to find out whether the plan works and whether the teams involved can communicate under pressure."
Pacific Prime, an insurance firm, said the role of HR in cybersecurity is "underestimated."
HR professionals can retaliate against malicious attempts at data and security breaches by minimising opportunities for threat actors to steal intellectual property or client lists, according to the firm.
They are also best positioned to provide guidance on appropriate employee misconduct or errors, and to decide how the organisation will respond to regulatory data violations.
HR leaders can also organise relevant training programmes to educate staff about best practices, potential threats, and sensitive information protection.
"Through managing employee data control and access, ensuring regulatory compliance, and conducting employee education, HR can play a centralised role in the development of solid cybersecurity defences," Pacific Prime said on its website.
