Skip to main content
Cybersecurity Statistics

Cybersecurity statistics / Phishing

Security teams remediate phishing incidents 16% faster but spend 9% more of their annual hours remediating phishing.

PublisherIRONSCALES
ReportThe (Higher) Business Cost of Phishing
Published4 June 2026
TopicsPhishing, Operational Efficiency, Workload

Published by IRONSCALES in The (Higher) Business Cost of Phishing , 4 June 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

5 sources answer what share of organisations experienced a phishing attack. They report between 38% and 76%, with a median of 42%.

See all 5 sources

Related statistics

Malicious email (26%) and phishing (24%) together account for 50% of ransomware incidents.
Sophos, 18/07/2026
36% of restaurants experienced phishing targeting staff credentials as a form of social engineering in the past year.
VikingCloud, 12/07/2026
Only 28% of the MFA used for workforce authentication in financial services is phishing-resistant.
Secret Double Octopus, 12/07/2026
After 90 days of security awareness training, the global average PPP drops to 20.1%.
KnowBe4, 12/07/2026
The three industries with the highest baseline PPP are Healthcare & Pharmaceuticals at 42.7%, Insurance at 38.1%, and Retail & Wholesale at 36%.
KnowBe4, 12/07/2026
Baseline PPP by region is: Africa 35.9%, North America 34.5%, South America 31.5%, and Asia 24.9%.
KnowBe4, 12/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.