Publicly traded companies represented only 7% (221 companies) of all compromised organisations, but issued 76% of victim notices in 2024

Of the 133 cyberattacks against publicly traded companies resulting in a data breach notice, a stolen credential was the leading attack vector.

99% of SaaS compromises originate at the identity provider (IdP).

23% of Brits feel pressured to work longer hours due to being monitored.

38% of UK employers say employees’ recorded emails or messages have been used to inform performance reviews.

Around 20% of domains registered by Scattered Spider imitated Help Desk and IT Support.

70% of the domains egistered by Scattered Spider imitated a specific organisation.

20–25% of Scattered Spider domains targeted finance and insurance companies.

The overwhelming majority of users (88%) use personal cloud apps each month, with 26% uploading, posting, or otherwise sending data to personal apps.

Around 60% of employees say they frequently use IT policy workarounds to “get the job done” and save time or effort.

66% of IT leaders have email security training on both inbound and outbound threats

98.9% of AI vulnerabilities are API related.

While 94% of organizations are using genAI apps, more than 99% of organizations have controls in place to mitigate the risks that genAI apps pose.

25% of UK security professionals cite a short timeline to becoming compliant as a barrier to DORA compliance.

28% of employees say online training modules you complete at your own pace is the most engaging/effective email security training format

81% of employees say security practices and technologies that are more user-friendly will result in better security outcomes

this is a test stat to see if synching works

Around 60% of employees say they frequently use IT policy workarounds to “get the job done” and save time or effort.

70% of employees in the US say they frequently use IT policy workarounds to “get the job done” and save time or effort.

63% of employees in the UK say they frequently use IT policy workarounds to “get the job done” and save time or effort.