Cybersecurity statistics / Email Attachments

More than 10% of HTML attachments are malicious.

Publisher	Barracuda
Report	2026 Email Threats Report
Published	12 May 2026
Topics	Email Attachments, HTML Attachments, Email Security

Published by Barracuda in 2026 Email Threats Report, 12 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

Malicious email (26%) and phishing (24%) together account for 50% of ransomware incidents.

Sophos, 18/07/2026

95.2% of phishing activity is delivered over encrypted channels.

Zscaler, 15/06/2026

Phishing activity declined by approximately 20% year-over-year in both 2024 and 2025.

Zscaler, 15/06/2026

Services industry phishing hits surged 65.5% year-over-year from 330.9 million to 547.7 million hits.

Zscaler, 15/06/2026

48% of malicious email activity is phishing.

Barracuda, 27/05/2026

63% of law firm decision-makers report a significant email-based security breach in the past 12 months.

Integris, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.