2% of attack attempts target internal-facing API endpoints.

20% of organizations rely on daily API checks.

3% of organizations are taking other measures to mitigate the risks of using Generative AI to develop APIs.

5% of developers are actively transitioning from human-first to AI-first design for APIs.

OpenAI racked up 4.2 million calls over the past 12 months.

Gemini experienced 3.1 times year-over-year growth.

46% of developers worry about AI systems sharing or leaking API credentials.

34% of organizations identified improved AI readiness as a channel through which revenue comes from APIs.

3% of organizations do not know if Generative AI is perceived as a growing API security concern/risk within their organization.

The costliest ransom paid (extrapolated value) by healthcare organizations was $1.2 million.

55% of respondents from healthcare organizations believe their organizations are vulnerable or highly vulnerable to a ransomware attack.

52% of healthcare organizations were vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident in 2024.

The suspected digital fraud rate for global account login attempts was 4.3% in H1 2025.

Global suspected digital fraud attempts for financial transactions represented 2.7% of transactions in H1 2025.

The volume of digital account takeover increased by 21% from H1 2024 to H1 2025.

Canada's overall suspected digital fraud rate was 4.2% in H1 2025, a decline from 5.4% in H1 2024.

11% of organizations raised their API security budgets by 16–20%.

E-mail scams increased by 44.2% from 2024 to 2025.

Indian business leaders claimed their companies lost the equivalent of 8.4% of their revenues to fraud in the past year, totaling 12T, which is higher than the 7.7% global average.

16% of organizations identify enabling AI agents or other autonomous systems as a main driver behind the use of APIs.