Thales
Reports
All Statistics
In 2025, AI-driven bot attacks surged 12.5x compared to the previous year.
Financial services accounted for 24% of all bot attacks and 46% of account takeover incidents.
27% of bot attacks targeted APIs, allowing bots to bypass user interfaces and interact directly with backend systems at machine speed.
69% of consumers say multifactor authentication increases their trust in companies
Automotive has 3% consumer trust
66% of business partner users admit to sharing or borrowing credentials
Only 34% of organizations know where all their data resides, whatever the level of criticality.
47% of sensitive cloud data remains unencrypted.
Credential theft is the leading attack technique against cloud management infrastructure, cited by 67% of organizations experiencing cloud attacks.
Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.
17% of respondents identified cloud security as their number one priority.
55% of respondents report cloud environments are more complex to secure than on-premises infrastructure. This represents a 4-percentage-point increase from last year.
Of those prioritizing AI security, nearly half are turning to new or emerging startups.
Of those prioritizing AI security, over two-thirds have acquired tools from their cloud providers.
Malware remains the top attack type, holding this position since 2021.
In the Retail sector, bad bots made up 59% of their traffic.
Financial services, healthcare, and e-commerce are the most affected sectors by sophisticated bot attacks targeting APIs
Malicious bots now account for 37% of all internet traffic, a significant increase from 32% in 2023.
Bots now account for over half of all internet traffic.
In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.
Banking has 57% consumer trust, up from 44% in 2025
Healthcare has 35% consumer trust
49% of IT leaders currently offer passkeys
87% of IT leaders say offering passkeys is important
Only 23% of consumers trust companies to use AI responsibly with their data
93% of IT leaders are using, deploying, or planning generative AI initiatives
Government services have 40% consumer trust
57% of consumers reported problems accessing a website in the past year.
Hospitality has 6% consumer trust
Only 22% of business partner users receive login credentials immediately during onboarding
Education has 15% consumer trust
Social media has 9% consumer trust
Logistics has 4% consumer trust
Only 30% of business partner users get full permissions on first access
45% of consumers prefer stronger security checks even if sign-ups take longer, while 22% favor faster access with lighter protections
Insurance has 23% consumer trust
News media has 5% consumer trust
77% of consumers are concerned about AI agents acting on their behalf online
33% of consumers switch to a competitor or abandon the attempt when access feels too slow or intrusive
36% of consumers delay engagement or look for alternative channels when access feels too slow or intrusive
68% of consumers say passkeys increase their trust in companies
Only 16% of consumers clearly understand how companies collect and use their personal data
Entertainment has 7% consumer trust
50% of organizations rank secrets management among their top application security challenges.
48% of companies report reputational damage tied to AI-generated misinformation or impersonation campaigns.
30% of companies dedicate specific budgets to AI security.
Nearly 60% of companies report experiencing deepfake-driven attacks.
53% of organizations still depend on traditional security programs built primarily for human users and perimeter-based controls.
Human error contributes to 28% of breaches.