AI-Driven Ransomware Attacks Cause Widespread Harm and Threats

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

A global Semperis report reveals that 84% of recent ransomware attacks weaponized AI, leading to repeated data breaches, ransom payments, and escalating physical and psychological threats against employees and their families. Attackers also exploited victims' own AI tools, amplifying harm and disruption across multiple countries and industries.[AI generated]

Why's our monitor labelling this an incident or hazard?

The report explicitly states that AI was used in ransomware attacks affecting organizations, causing harm such as repeated attacks and ransom payments. The AI system's use in facilitating these attacks directly leads to harm to property and disruption of operations, fitting the definition of an AI Incident. The involvement of AI in the attack methods and the resulting realized harm confirms this classification.[AI generated]
AI principles
Privacy & data governanceSafety

Industries
Digital securityIT infrastructure and hosting

Affected stakeholders
WorkersBusiness

Harm types
Economic/PropertyPsychologicalHuman or fundamental rights

AI system task:
Content generationReasoning with knowledge structures/planning


Articles about this incident or hazard