Phishing consumes 36.5% of security team working hours, up from 33.5% three years ago.

48% of malicious email activity is phishing.

90% of high-volume phishing campaigns use phishing-as-a-service kits.

70% of malicious PDFs contain QR codes leading to phishing websites.

Phishing and transfer fraud accounted for roughly 30% of all manufacturing claims.

Among those who experienced a breach or attack, the proportion experiencing phishing attacks only (and no other type of breach or attack) has increased among both businesses (from 45% last year to 51% this year) and charities (from 46% last year to 57% this year).

In 2025, AI generated 82.6% of phishing content.

Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities)

30% of CIOs identify phishing as a dominant threat.

Routine invoice inquiries have a compromise rate of less than 1%.

In the last six months, Microsoft Teams attacks escalated by 41%.

Over a quarter of CIOs report AI as a significant source of risk, placing it on par with malware, ransomware and phishing.

The average transfer fraud event costs roughly ten times more than the average email compromise in manufacturing claims.

In the last six months, 86% of phishing attacks were AI-driven.

Internal team impersonation was present in 30% of phishing attacks by threat actors in Q1 2026.

In the last six months, calendar invite phishing increased by 49%.

Billing account update requests have a 26.5% compromise rate.

Nearly one in eight phishing attacks that reach student inboxes originate from compromised internal accounts.

Phishing accounts for 58% of all attacks.

21.6% of phishing attacks use redirect chains that route victims through multiple URLs to obscure malicious destinations.