Phishing Attack Statistics and Cybersecurity Risks

Phishing attacks are a significant threat to individuals and organizations alike, with alarming statistics that highlight the severity of the issue.

In 2020, phishing attacks increased by 37% compared to the previous year, making it one of the fastest-growing cyber threats.

Phishing attacks are often launched via email, with 94% of malware being spread through email attachments or links.

The average cost of a phishing attack on a business can be as high as $1.6 million, with the average cost per user being $8,000.

Phishing attacks are a serious threat to businesses and individuals alike. 91% of cyber attacks begin with a phishing email, making it the most common entry point for attackers.

The frequency of phishing attacks is staggering, with an average of 156 million phishing emails being sent every day. This number is expected to continue growing, with a projected 31,000 incidents daily.

Phishing attacks can have devastating consequences, with the FBI estimating that cybercriminals have stolen more than $12 billion from companies over a five-year span using phishing attacks and business email compromise.

A study by the University of Maryland found that an attack occurs on average every 39 seconds, with 16 million phishing emails making it through company filters and half of those getting opened by recipients.

The impact of phishing attacks is not limited to big businesses, with nearly half of all small businesses being attacked with disastrous results. 60% of small and medium-sized businesses that get hacked go out of business after just six months.

Here are some alarming statistics on the prevalence of phishing attacks:

These statistics highlight the pressing need for improved security measures and vigilance among businesses. By staying informed and taking proactive steps, individuals and organizations can reduce their vulnerability to phishing attacks.

Phishing attacks have become a serious threat to businesses and individuals alike. 90% of cyberattacks are phishing, making it a launchpad for various malicious activities.

Phishing attacks can take many forms, including deepfake-powered phishing attacks. In 2025, a significant share of organizations worldwide experienced deepfake-powered cyberattacks, which is a worrying trend.

QR code phishing attacks are another type of phishing attack that organizations should be aware of. In 2025, a notable share of organizations worldwide experienced QR code phishing attacks.

Phishing emails can also be categorized into different types, including those that use social engineering tricks to lure employees into clicking malicious links. The leading phishing e-mail categories worldwide in 2025 include those that use these tactics.

Employee confidence in recognizing deepfakes is also an important aspect of phishing defense. Unfortunately, in 2025, employees worldwide showed low confidence in recognizing AI deepfakes.

Here are some types of phishing attacks that organizations should be aware of:

Phishing attacks are a serious threat to individuals and businesses alike. 91% of cyber attacks begin with a phishing email, making it the most common entry point for attackers.

The statistics are staggering: an average of 156 million phishing emails are sent every day, with 16 million of them making it through company filters and half of those getting opened by recipients. This translates to 80,000 people being victims of malicious activity each day from phishing emails.

The costs of phishing attacks are also substantial, with the FBI estimating that cybercriminals have stolen more than $12 billion from companies over a five-year span using phishing attacks and business email compromise.

Here are some key statistics on phishing attacks:

Phishing attacks are not just limited to big businesses, with nearly half of all small businesses having been attacked with disastrous results. 60% of small and medium-sized businesses that get hacked go out of business after just six months.

It's not just the financial costs that are a concern, but also the emotional toll of phishing attacks. Cybersecurity experts have reported being phishing targets, with nearly 50% of them having faced a Business Email Compromise (BEC) attack.

Phishing attacks are a serious threat that requires attention and action. By understanding the statistics and taking steps to prevent phishing attacks, individuals and businesses can reduce the risk of falling victim to these attacks.

Online threats are a growing concern, and it's essential to stay informed about the latest statistics. U.S. adults receiving scam messages at least weekly in 2025 is a staggering issue, with 51.7% of phishing attempts mimicking the top 20 global brands.

These impersonation attacks are highly effective, with 75% of phishing attempts focusing on credential phishing, password spraying, and social engineering, rather than malware. This suggests that cybercriminals are adapting their tactics to evade detection.

The age factor also plays a significant role in online scams, with U.S. adults experiencing online scams in 2025 varying by age. Here's a breakdown of the share of adults experiencing different online scams as of April 2025, by type:

The frequency of scam messages also varies, with U.S. adults receiving scam messages at least weekly in 2025 differing by frequency. This highlights the importance of being vigilant and proactive in protecting ourselves from online threats.

U.S. adults who have lost money through online scams or attacks in 2025 also varies by age, with a significant share of older adults falling victim to these scams. It's essential to take steps to protect ourselves and our loved ones from these threats.

Human error is a major contributor to data breaches, with 82% of incidents involving a human component, such as phishing or stolen credentials.

Phishing attacks are a significant threat, with emails constantly evolving to evade detection. New AI capabilities make it increasingly difficult to distinguish genuine emails from forgeries.

Credentials, such as usernames and passwords, are the most compromised data in social engineering attacks. This highlights the need for robust security measures against these types of attacks.

Whalebone Immunity's home office protection extends the cyber security perimeter beyond the corporate network, shielding employees at the DNS level regardless of their location.

Advanced threat detection and response solutions, like Whalebone Immunity, can help mitigate human error and prevent malicious domains from being accessed.

Explore further: Ai Phishing Detection

To effectively prevent phishing attacks, you need to take proactive steps and rethink your approach to security. 87% of business and IT executives agree that organizations must do this.

The weakest link in your cybersecurity is humans, who can still click on a malicious link or fail to recognize phishing dangers even after training.

A robust phishing attack solution is essential to stop malicious emails from getting through in the first place.

Intriguing read: Link Building Stats

Phishing attacks have a significant impact on businesses, with average annual expenses reaching $15 million. This financial burden includes immediate costs from ransomware demands and extensive downtime and recovery efforts.

Phishing leads to not only direct economic losses but also identity theft, unauthorized access to confidential data, and loss of customer trust and loyalty.

Remote working has made employees more susceptible to phishing attacks, with 84% of IT professionals agreeing that remote working has increased this risk.

Phishing attacks have become a major concern for organizations, and it's essential to take measures to protect against these threats.

Here's a breakdown of the types of phishing attacks:

Impersonating top brands in phishing attacks is a highly effective tactic for cybercriminals, with 51.7% of phishing attempts mimicking the top 20 global brands.