27% of respondents are concerned about AI-generated phishing.

Comcast Business detected 4.7 billion phishing attempts, which specifically targeted human error and poor credential hygiene.

30% of education institutions reported that AI-generated phishing attempts or misinformation campaigns were contained quickly.

39% of respondents are most worried about AI-driven phishing when it comes to modern or future fraud and scams.

11% of education institutions reported that AI-generated phishing attempts or misinformation campaigns caused disruption.

70% of respondents believe phishing attempts have become more successful due to the use of AI.

When shown a phishing email, 54% of respondents either believed it was an authentic message written by a human or were unsure.

78% of respondents believe phishing attempts have become more sophisticated due to the use of AI.

Gen Z is the most susceptible demographic to phishing, with 62% reporting engagement (e.g., clicking a link or opening an attachment) with a phishing scam in the past year.

42% of respondents of UK IT leaders cited external threats (such as phishing, spoofing, and spam) as their bigest email security challenge.

47% of IT leaders based in Australia cite managing external threats (such as phishing and spoofing) as their top security challenge.

The percentage of respondents who could correctly recognize a phishing attempt was similar across generations: Gen Z - 45%, Millennials - 47%, Gen X and baby boomers - 46% (both groups).

44% of all participants admitted to having interacted with a phishing message in the last year.

46% of US IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

43% of UK IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

42% of IT leaders based in Germany cite managing external threats (such as phishing and spoofing) as their top security challenge.

In Q2 2025, 13% of malicious emails (phishing, malware, etc.) were not blocked by the email gateway security system. This is 1 percentage point higher than in Q1 2025.

In 24.6% of large ransomware claims, attackers used phishing to infiltrate systems.

IT leaders estimate that only 5% of known phishing attacks in healthcare are actually reported by employees to security teams.

Only 15% of enterprises simulate vishing.