The Secure Controls Framework (SCF) is one of the top 5 frameworks adopted by organizations.

Nearly a third of leaders at financial services firms admit they are not fully confident employees could recognize an AI-driven phishing or social engineering threat.

SOC 2 is one of the top 5 frameworks adopted by organizations.

53% of open-source Model Context Protocol (MCP) server implementations rely on insecure, long-lived static secrets, such as API keys and Personal Access Tokens (PATs).

There was a 30% drop between the total number of repositories downloaded and those implementing real open-source Model Context Protocol (MCP) servers.

The construction sector suffered 143 ransomware attacks between July and September 2025.

Across 449 dark web victim listings where details were available, the average data volume exfiltrated was 527.65GB in Q3 2025.

Other groups were collectively responsible for 1018 undisclosed ransomware attacks in Q3 2025, representing 67% of all undisclosed ransomware attacks.

The INC ransomware group exfiltrated 5.7 TB of data from the Pennsylvania Office of Attorney General.

The Pennsylvania Office of Attorney General's systems were taken down across 17 offices statewide.

Approximately 1,200 staff of the Pennsylvania Office of Attorney General had to use forced workarounds due to the cyberattack.

83% of family offices are concerned about deepfakes or other impersonation threats.

The confidence level among family offices that their employees can detect and prevent AI-powered cyber-attacks is 60% (compared to 69% average and 78% among RIAs).

72% of family offices believe they are targeted more often because they manage high-networth assets.

1 in 4 organizations (25%) were down more than a week from a cyberattack.

33% of leaders at financial services firms say they are unprepared to recover effectively from a Phishing or smishing campaign.

57% of RIAs increased security budgets.

18% of leaders at financial services firms say they are unprepared to recover effectively from an Insider threat or data compromise.

78% of financial services firms increased cybersecurity spending in the past year.

16% of executives at financial services firms acknowledge that a lack of experienced IT or security staff is a significant weakness that could slow recovery.