Thales
Reports
All Statistics
In 2025, AI-driven bot attacks surged 12.5x compared to the previous year.
Financial services accounted for 24% of all bot attacks and 46% of account takeover incidents.
27% of bot attacks targeted APIs, allowing bots to bypass user interfaces and interact directly with backend systems at machine speed.
69% of consumers say multifactor authentication increases their trust in companies
36% of consumers delay engagement or look for alternative channels when access feels too slow or intrusive
Automotive has 3% consumer trust
Only 34% of organizations know where all their data resides, whatever the level of criticality.
47% of sensitive cloud data remains unencrypted.
Credential theft is the leading attack technique against cloud management infrastructure, cited by 67% of organizations experiencing cloud attacks.
Enterprises now use an average of 85 SaaS applications, contributing to security tool sprawl.
Over half of cloud data is now classified as sensitive.
Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.
Human error, while still significant, has dropped to third place of most concerning threat actors.
Of those prioritizing AI security, nearly half are turning to new or emerging startups.
Phishing has risen to second place of most popular attack types.
ByteSpider Bot was responsible for 54% of all AI-enabled attacks. Other significant contributors include AppleBot at 26%, ClaudeBot at 13%, and ChatGPT User Bot at 6%.
The travel sector topped the list for bot attacks overall, accounting for 27% of all bot attacks in 2024, up from 21% in 2023.
The financial services sector was the most targeted industry for account takeover (ATO) attacks, accounting for 22% of all incidents.
Bots now account for over half of all internet traffic.
In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.
93% of IT leaders are using, deploying, or planning generative AI initiatives
66% of business partner users admit to sharing or borrowing credentials
Education has 15% consumer trust
Banking has 57% consumer trust, up from 44% in 2025
Healthcare has 35% consumer trust
49% of IT leaders currently offer passkeys
87% of IT leaders say offering passkeys is important
Only 23% of consumers trust companies to use AI responsibly with their data
Government services have 40% consumer trust
57% of consumers reported problems accessing a website in the past year.
Hospitality has 6% consumer trust
Only 22% of business partner users receive login credentials immediately during onboarding
Social media has 9% consumer trust
Logistics has 4% consumer trust
Only 30% of business partner users get full permissions on first access
45% of consumers prefer stronger security checks even if sign-ups take longer, while 22% favor faster access with lighter protections
News media has 5% consumer trust
Insurance has 23% consumer trust
77% of consumers are concerned about AI agents acting on their behalf online
33% of consumers switch to a competitor or abandon the attempt when access feels too slow or intrusive
Only 16% of consumers clearly understand how companies collect and use their personal data
Entertainment has 7% consumer trust
68% of consumers say passkeys increase their trust in companies
50% of organizations rank secrets management among their top application security challenges.
48% of companies report reputational damage tied to AI-generated misinformation or impersonation campaigns.
30% of companies dedicate specific budgets to AI security.
Nearly 60% of companies report experiencing deepfake-driven attacks.
53% of organizations still depend on traditional security programs built primarily for human users and perimeter-based controls.
Human error contributes to 28% of breaches.