Skip to main content

Cybersecurity statistics / Phishing

Organizations reduce phishing susceptibility by 40% within the first 90 days of training and by 79% after one year of ongoing security awareness training.

PublisherKnowBe4
ReportPhishing by Industry Benchmarking Report 2026 Edition
Published7 July 2026
TopicsPhishing, Security Training, Behavior Change

Published by KnowBe4 in Phishing by Industry Benchmarking Report 2026 Edition, 7 July 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Malicious email (26%) and phishing (24%) together account for 50% of ransomware incidents.
Sophos, 18/07/2026
The global average Phish-prone Percentage (PPP) is 33.2% before training.
KnowBe4, 12/07/2026
Only 28% of the MFA used for workforce authentication in financial services is phishing-resistant.
Secret Double Octopus, 12/07/2026
Phishing accounted for 49% of blocked harmful content and phishing volume grew 94% year-on-year.
Infobip, 12/07/2026
Baseline PPP by region is: Africa 35.9%, North America 34.5%, South America 31.5%, and Asia 24.9%.
KnowBe4, 12/07/2026
Organizations reduce phishing susceptibility by 79% after one year of consistent security awareness training.
KnowBe4, 12/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.