Semperis Study Finds Ransomware Attacks Surge During Holidays and Corporate Events

The majority of ransomware attacks continue to occur on holidays and weekends, announced in a press release by Semperis. The company's 2025 Holiday Ransomware Risk Report found that 52% of surveyed organizations across the U.S., UK, Europe, and Asia-Pacific were targeted during these periods of reduced cybersecurity staffing.

According to the study, 78% of companies reported cutting security operations center staffing by half or more during holidays and weekends, while 6% operated without any staff coverage. Attackers also intensified activity during corporate events such as mergers, acquisitions, IPOs, and layoffs, with 60% of ransomware incidents occurring after such events.

The report noted that many organizations prioritize detection over recovery in their identity threat detection and response (ITDR) plans. While 90% of respondents said their ITDR systems identify vulnerabilities, only 45% include remediation steps, and 63% automate system recovery. The findings highlight the increased risk of ransomware during times of organizational disruption and reduced vigilance.