Ransomware gangs now target 46-year-old IT managers instead of CEOs

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

New research from Zscaler's ThreatLabz reveals a shift in ransomware tactics: attackers are increasingly targeting mid-level managers, particularly those in their 40s, rather than C-suite executives. Analyzing a campaign that hit 334 organizations, they found that nearly two-thirds of victims held manager-level titles or above, with an average age of 46. These employees often have access to financial systems, contracts, and other sensitive data, making them valuable leverage for extortion. The report also notes a broader trend toward data theft and extortion over simple encryption, with ransomware attempts up 146% and stolen data volumes up 92% in the past year.