100% of enterprises test email phishing.

Just 18% of enterprises tailor phishing simulations by both role and behavior.

Just 15% of CISOs at enterprises test voice phishing.

Only 27% of CISOs at enterprises simulate SMS phishing.

59% of CISOs at enterprises fear voice phishing (vishing).

AI-personalized phishing now drives 300% more user interaction than traditional, templated variants.

Only 27% of enterprises test smishing.

91% of enterprises say tailoring phishing simulations by both role and behavior is essential.

71% of CISOs at enterprises worry about SMS phishing (smishing).

77% of small business leaders are concerned about phishing and impersonation scams powered by AI.

78% of security leaders identify social engineering and phishing as their top threat.

Comprehensive security awareness training can reduce phishing susceptibility to below 5%.

AI-enhanced phishing and social engineering are the most concerning tactics (27%) for insider threats.

Initially, large financial institutions show 44.7% Phish-prone™ Percentage (PPP) rates, meaning nearly 45% of employees were susceptible to phishing attacks or likely to click on a malicious link or download an infected file.

Only half of small healthcare practices have phishing or spoofing protection enabled.

Phishing attacks now account for over 70% of healthcare data breaches as of 2024.

About 50% of small healthcare organisations lack anti-phishing controls beyond default spam filters.

Solara Medical faced a $9.76 million class-action settlement following a phishing attack.

43% of small healthcare organisations reported experiencing a phishing or spoofing incident in the past year.

Salud Family Health had a phishing attack exposing 80,000+ records.