The (Higher) Business Cost of Phishing

50% of organizations rate phishing as a high or extreme threat, up from 33% in 2022.

Phishing costs $51,948 per security analyst annually, a 13.6% increase from $45,726 in 2022.

20% of IT and security professionals expect phishing to get easier to deal with in the next 12 months.

Security teams remediate phishing incidents 16% faster but spend 9% more of their annual hours remediating phishing.

AI-assisted text in malicious emails doubled compared to prior years.

AI-powered defenses reduce per-incident phishing handling time by 16% (from 27.5 minutes to 23.2 minutes) and reduce cost per phishing email by 12% (from $31.32 to $27.51).

31.3% of IT and security professionals rate deepfake voice and video technology as "extremely impactful" among emerging threat trends.

40% of IT and security professionals expect phishing attack volume, speed, and evasiveness to worsen over the next 12 months.

Phishing consumes 36.5% of security team working hours, up from 33.5% three years ago.

62.5% of IT and security professionals say deepfake attacks are immediately disruptive.

Phishing accounts for 44% of AI-assisted initial access attempts.