52% of healthcare organizations were vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident in 2024.

In 2022, 64% of respondents from healthcare organizations said their organizations were very or highly vulnerable to BEC/spoofing/impersonation attacks.

53% of healthcare organizations believe their organizations are vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident.

46% of US IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

47% of IT leaders based in Australia cite managing external threats (such as phishing and spoofing) as their top security challenge.

42% of respondents of UK IT leaders cited external threats (such as phishing, spoofing, and spam) as their bigest email security challenge.

43% of UK IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

42% of IT leaders based in Germany cite managing external threats (such as phishing and spoofing) as their top security challenge.

Only half of small healthcare practices have phishing or spoofing protection enabled.

43% of small healthcare organisations reported experiencing a phishing or spoofing incident in the past year.

Only 7.7% of the world’s top 1.8 million email domains are fully protected against phishing and spoofing by having implemented the most stringent DMARC policy, 'p=reject'1.

92% of the world's top email domains are reported to remain unprotected against phishing and spoofing.

Microsoft spoofing spiked 156% in 2024.

68.6% of clicked links involved domain spoofing.

The FBI received 193,407 complaints about phishing/spoofing in 2024 (versus 298,878 in 2023 and 321,136 in 2022).

Spoof emails were the most prevalent type of BEC, cited by 79% of respondents.