Skip to main content
Cybersecurity Statistics

Cybersecurity statistics / Phishing

Phishing consumes 36.5% of security team working hours, up from 33.5% three years ago.

PublisherIRONSCALES
ReportThe (Higher) Business Cost of Phishing
Published4 June 2026
TopicsPhishing, Phishing Cost, Workload

Published by IRONSCALES in The (Higher) Business Cost of Phishing , 4 June 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

5 sources answer what share of organisations experienced a phishing attack. They report between 38% and 76%, with a median of 42%.

See all 5 sources

Related statistics

Malicious email (26%) and phishing (24%) together account for 50% of ransomware incidents.
Sophos, 18/07/2026
36% of restaurants experienced phishing targeting staff credentials as a form of social engineering in the past year.
VikingCloud, 12/07/2026
Only 28% of the MFA used for workforce authentication in financial services is phishing-resistant.
Secret Double Octopus, 12/07/2026
After 90 days of security awareness training, the global average PPP drops to 20.1%.
KnowBe4, 12/07/2026
The three industries with the highest baseline PPP are Healthcare & Pharmaceuticals at 42.7%, Insurance at 38.1%, and Retail & Wholesale at 36%.
KnowBe4, 12/07/2026
Baseline PPP by region is: Africa 35.9%, North America 34.5%, South America 31.5%, and Asia 24.9%.
KnowBe4, 12/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.