Phishing vs Data Breach

Vishing intrusions increased by 2x in 1H 2026.

17% of reported cybercrime cases in Africa in 2025 involved online scams, including phishing.

Monthly device code phishing attempts increased 15x in 1H 2026.

In the first half of 2026, 67% of phishing emails passed DMARC.

39% of phishing messages featured novel social engineering techniques.

VIP users were targeted in 25.8% of phishing attacks.

The three most vulnerable industries at baseline are Healthcare & Pharmaceuticals (42.7%), Insurance (38.1%), and Retail & Wholesale (36%).

Organizations reduce phishing susceptibility by 79% after one year of consistent security awareness training.

Before any training, roughly one in three employees is likely to engage with a phishing attempt.

Almost 86% of phishing attacks contain AI-generated elements.

The number of mobile devices where employees clicked a malicious link grew 110% in 2025 compared to 2024.

Phishing events detected on employee mobile devices have grown 380% since January 2025.

Phishing was the primary means of gaining initial access in over half of Cisco Talos Incident Response engagements this quarter, up from approximately one-third of engagements last quarter.

The ARToken panel exposed 80+ API endpoints for device code phishing, primary refresh token persistence, email access, BEC operations, and SharePoint exfiltration.

Microsoft was the most impersonated brand in Q2 2026, appearing in 23% of all brand phishing attempts.

In the past 12 months, 27% of organizations reported data breaches tied to AI use.

Sensitive information disclosure ranks as the second biggest LLM threat for a second consecutive year.

11% of reported cybercrime cases in Africa in 2025 involved data breaches.

The global breach average is $4.99 million.

AI-enabled malicious breaches increased by 56% over the previous year.

Financial services breaches cost on average $6.3 million.

73% of organizations have found their workforce’s credentials in breach, Dark Web, or infostealer data in the past year

Nearly 693,000 records are known to have been breached in the confirmed education-sector ransomware attacks in H1 2026.

Only 24% of H1 2026 breach notices contained attack-vector details, the lowest rate ever recorded by the ITRC.

A single Canvas data compromise generated an estimated 275 million victim notices, accounting for 58% of the H1 2026 total.

Financial services recorded the highest frequency of compromises by sector at 387.

77% of enterprises are concerned about data breaches or theft in non-production environments.

68% of enterprises are concerned about data leaks in AI workflows.

Stealer log exposure increased 175% in a before-and-after security posture comparison.

34% of enterprise leaders report their organizations have experienced data breaches or theft.