Report by Outtake
The 2026 State of Digital Risk Report
Key Findings
84% of enterprises experienced material digital risk incidents in the past year.
Only 7% of enterprises describe their digital risk program as "leading."
53% of enterprises report manual remediation as their top cost category for digital risk.
44% of enterprises say AI-generated attacks are already indistinguishable from legitimate activity.
43% of enterprises have no capability to build a threat profile around someone actively being targeted.
53% of enterprises had an executive or employee impersonated in the past year.
Only 16% of enterprises have formal protection covering most or all employees.
Only 5% of enterprises ever trace brand impersonation back to a full campaign.
Nearly seven in ten enterprises describe their digital risk program as unaware, reactive, or still developing.
96% of enterprises have no automated way to stop a hijacked AI agent.