In 2022, 64% of respondents from healthcare organizations said their organizations were very or highly vulnerable to BEC/spoofing/impersonation attacks.

52% of healthcare organizations were vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident in 2024.

53% of healthcare organizations believe their organizations are vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident.

47% of IT leaders based in Australia cite managing external threats (such as phishing and spoofing) as their top security challenge.

42% of respondents of UK IT leaders cited external threats (such as phishing, spoofing, and spam) as their bigest email security challenge.

46% of US IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

43% of UK IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.

42% of IT leaders based in Germany cite managing external threats (such as phishing and spoofing) as their top security challenge.

43% of small healthcare organisations reported experiencing a phishing or spoofing incident in the past year.

Only half of small healthcare practices have phishing or spoofing protection enabled.

92% of the world's top email domains are reported to remain unprotected against phishing and spoofing.

Only 7.7% of the world’s top 1.8 million email domains are fully protected against phishing and spoofing by having implemented the most stringent DMARC policy, 'p=reject'1.

Microsoft spoofing spiked 156% in 2024.

68.6% of clicked links involved domain spoofing.

The FBI received 193,407 complaints about phishing/spoofing in 2024 (versus 298,878 in 2023 and 321,136 in 2022).

Spoof emails were the most prevalent type of BEC, cited by 79% of respondents.