45% of the top 10 most-clicked simulated phishing emails referenced HR between July 1, 2025, and September 30, 2025.

90% of the most-clicked subject lines in simulated phishing emails reference internal topics.

70% of simulated landing page interactions involve branded content.

25% of branded content interactions in simulated phishing emails involved Microsoft between July 1, 2025, and September 30, 2025.

82% of the top 20 clicked links in simulated phishing emails came from internally themed simulations between July 1, 2025, and September 30, 2025.

28% of breaches in 2025 were initiated through phishing or social engineering.

AI-powered phishing campaigns achieve a 54% click-through rate, over four times higher than traditional phishing.

45% of victims reported that phishing was the initial point of compromise in ransomware attacks

57% of organizations in the U.K. and Singapore expressed concern about social engineering tactics

57% of French organizations reported the greatest concern about AI-enabled threats, compared to an average of 45% across geographies

50% of senior decision-makers reported concern about AI-generated phishing emails, compared to 40% of junior management

67% of people are concerned about their older loved ones falling for a suspicious email or text scam offering a sale or deal.

26% of scam victims reported phishing.

Monitoring and mitigating phishing attacks consumes 9.6% of Managed Service Provider (MSP) technician time.

33% of leaders at financial services firms say they are unprepared to recover effectively from a Phishing or smishing campaign.

Nearly a third of leaders at financial services firms admit they are not fully confident employees could recognize an AI-driven phishing or social engineering threat.

40% of Gen Z households reported phishing attempts.

46% of extortion targets agree 'I’m more likely to click a link on my phone than on my laptop'.

52% of extortion victims agree 'I’m more likely to click a link on my phone than on my laptop'.

Phishing was reported by 34% of targeted consumers as a leading type of fraud experienced.