34% of senior security and IT leaders at U.S. enterprises with 500+ employees say their existing tools surface issues but lack the context to prioritize by business impact.

94% of senior security and IT leaders at U.S. enterprises with 500+ employees say building a more complete, financially quantified view of their identity risk posture is a top or high priority in the next 12 months.

85% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is hard to tell a scam apart from the real thing, up from 66% in 2025.

88% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is becoming harder to tell what online content is genuinely human or real.

50% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland have experienced some form of AI fraud or scam.

Exposure to AI fraud or scams is 67% for Gen Z, 51% for Millennials, 46% for Gen X, and 30% for Boomers and older.

Exposure to AI fraud or scams is 56% in the United States, 48% in the UK, and 47% in the DACH region.

81% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland fear someone stealing their family's likeness.

67% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland worry about voice cloning.

74% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland are concerned about experiencing a deepfake or other AI-generated scam.

18% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is okay to use AI to generate explicit images of someone they do not know.

32% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is okay to use AI to imitate someone's voice or appearance for personal use.

Only 11% of organizations report full AI security readiness.

Among organizations where AI significantly expanded identities requiring access, breach rates reached 43% over the past twelve months. In contrast, where AI had not materially changed access patterns, breach rates were 11% over the past twelve months.

76% of organizations do not fully govern or monitor non-human identities.

Enterprise application exploitation surged 800% in 2025, making ERP, CRM, collaboration, and operational business platforms top targets.

76% of organizations cannot immediately revoke standing access when it is no longer needed.

Only 11% of organizations have operationalized AI governance through continuous enforcement and monitoring.

43% of senior security and IT leaders at U.S. enterprises with 500+ employees say they can assess the full blast radius of a compromised, high-privilege account within minutes.

Only 19% of organizations fully govern non-human identities.