64% of desk-based workers who use email or chat say an AI-generated message could likely impersonate someone they work with.

In 2025, attackers compromised victims via phishing emails in 40% of Talos IR cases.

72% of desk-based workers who use email or chat say phishing attempts are more convincing than a year ago because of AI-written language.

57% of desk-based workers who use email or chat have verified a message's request only after taking action first.

57% of desk-based workers who use email or chat say AI makes phishing harder to spot because it feels more professional.

45% of desk-based workers who use email or chat have replied to a work message and later questioned whether it was legitimate.

63% of desk-based workers who use email or chat clicked a work-related link in the past year and later felt they should have double-checked it first.

60% of the top 20 terms appearing in phishing subject lines were the same in 2024 and 2025, such as “request,” “invoice,” “payment,” “email,” “fwd,” “message,” “report,” and “meeting.”

Phishing was the leading cause of data security incidents, accounting for 30%.

37% of consumers would use AI to identify phishing emails or scam messages.

42% of MSPs who reported BYOD-related security incidents report email or messaging compromise, primarily phishing

17% of phishing cases involved voice-based social engineering (vishing).

72.6% of successful AI attacks passed email authentication.

AI-generated emails reach the inbox more than half the time.

48% of enterprises' cyberattacks involve phishing or social engineering.

39% of organizations experience phishing attacks.

Enterprise workforces are three times more likely to be targeted with phishing attacks than with infostealer malware.

Successful phishing attacks have surged 400% year-over-year.

AI-generated email attacks grew 5x in 2025.

AI-generated spear phishing increased from 2.8% to 13.9% of total observed phishing in 2025.