13% of digital trust professionals assign ultimate AI responsibility to their CISO.

20% of digital trust professionals do not know where ultimate responsibility for AI would lie in their organization.

Akira and Play, ranked as second and third most prolific ransomware groups, respectively.

The popularity of the other groups in last year’s top five fell significantly this year, with LockBit 3.0 moving from first to 35th, RansomHub from second to eighth, and Hunter’s International from fifth to 28th.

January remains least active month for ransomware activity.

In 2026, enterprise cloud infection rates reached the highest level ever recorded in the study's history.

20% of IT budgets are now dedicated to security among organizations in Canada.

Qilin affiliates take home a significant portion of their ransom payments (up to 80 - 85%), higher than typical RaaS payout structures.

In 2025, nearly a third of MFA spray attacks targeted identity and access management (IAM) applications.

The number of investigations Talos conducted into China-nexus campaigns increased nearly 75% this year compared to 2024.

Over half of sub-1 Gbps DDoS attacks are under 200 Mbps and blend into normal traffic while probing defenses.

72% of desk-based workers who use email or chat say phishing attempts are more convincing than a year ago because of AI-written language.

45% of desk-based workers who use email or chat have replied to a work message and later questioned whether it was legitimate.

57% of organizations in Canada report security funding as good or readily available.

45% of organizations in Canada choose identity and access security for AI workloads.

29% of organizations state that unstructured data accounts for more than half of their annual data growth.

77% of consumers are concerned about AI agents acting on their behalf online

33% of consumers switch to a competitor or abandon the attempt when access feels too slow or intrusive

36% of consumers delay engagement or look for alternative channels when access feels too slow or intrusive

68% of consumers say passkeys increase their trust in companies