Thales
Reports
All Statistics
In 2025, AI-driven bot attacks surged 12.5x compared to the previous year.
Financial services accounted for 24% of all bot attacks and 46% of account takeover incidents.
27% of bot attacks targeted APIs, allowing bots to bypass user interfaces and interact directly with backend systems at machine speed.
69% of consumers say multifactor authentication increases their trust in companies
Automotive has 3% consumer trust
36% of consumers delay engagement or look for alternative channels when access feels too slow or intrusive
Only 34% of organizations know where all their data resides, whatever the level of criticality.
47% of sensitive cloud data remains unencrypted.
Credential theft is the leading attack technique against cloud management infrastructure, cited by 67% of organizations experiencing cloud attacks.
Enterprises now use an average of 85 SaaS applications, contributing to security tool sprawl.
Over half of cloud data is now classified as sensitive.
Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.
64% of organizations view lack of integrity as a major concern regarding AI adoption.
73% of respondents report investing in AI-specific security tools, using either new budgets or reallocating existing resources.
The top quantum-related threat, cited by 63% of respondents, is future encryption compromise (the risk that quantum computers could break current or future encryption).
The travel sector topped the list for bot attacks overall, accounting for 27% of all bot attacks in 2024, up from 21% in 2023.
ByteSpider Bot was responsible for 54% of all AI-enabled attacks. Other significant contributors include AppleBot at 26%, ClaudeBot at 13%, and ChatGPT User Bot at 6%.
The financial services sector was the most targeted industry for account takeover (ATO) attacks, accounting for 22% of all incidents.
Bots now account for over half of all internet traffic.
In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.
93% of IT leaders are using, deploying, or planning generative AI initiatives
66% of business partner users admit to sharing or borrowing credentials
Education has 15% consumer trust
Banking has 57% consumer trust, up from 44% in 2025
Healthcare has 35% consumer trust
49% of IT leaders currently offer passkeys
87% of IT leaders say offering passkeys is important
Only 23% of consumers trust companies to use AI responsibly with their data
Government services have 40% consumer trust
57% of consumers reported problems accessing a website in the past year.
Hospitality has 6% consumer trust
Only 22% of business partner users receive login credentials immediately during onboarding
Social media has 9% consumer trust
Logistics has 4% consumer trust
Only 30% of business partner users get full permissions on first access
45% of consumers prefer stronger security checks even if sign-ups take longer, while 22% favor faster access with lighter protections
News media has 5% consumer trust
Insurance has 23% consumer trust
77% of consumers are concerned about AI agents acting on their behalf online
33% of consumers switch to a competitor or abandon the attempt when access feels too slow or intrusive
Only 16% of consumers clearly understand how companies collect and use their personal data
Entertainment has 7% consumer trust
68% of consumers say passkeys increase their trust in companies
50% of organizations rank secrets management among their top application security challenges.
48% of companies report reputational damage tied to AI-generated misinformation or impersonation campaigns.
30% of companies dedicate specific budgets to AI security.
Nearly 60% of companies report experiencing deepfake-driven attacks.
53% of organizations still depend on traditional security programs built primarily for human users and perimeter-based controls.
Human error contributes to 28% of breaches.