Three-Quarters of Organizations Have Experienced an Increase in Email-Based Threats

Stu Sjouwerman | Mar 15, 2023

Email-Based ThreatsNew data on the state of email security shows that nearly every organization has been the target of a phishing attack as attacks increase in sophistication.

While organizations are attempting to shore up their cybersecurity defenses, Mimecast’s State of Email Security report shows that attacks continue to improve, continue to succeed, and continue to do harm.

According to the report:

  • 97% of organizations have been the target of a phishing attack
  • 67% have been harmed by a ransomware attack
  • 59% of orgs feel cyberattacks are growing increasingly sophisticated

On top of this, 8 out of 10 companies feel like their email usage continues to rise, making it easier for malicious emails to blend in with the legitimate.

What’s interesting is that, according to the report, 99% of organizations provide some form of cyber awareness training to their workforce – and yet, we’re still seeing successful attacks.

If you fall into that 99% (and it’s obviously likely you do), I do want to encourage you to assess the frequency and method of training used. If you’re doing quarterly break room meetings, believe me – they’re completely ineffective. It’s only through continual online Security Awareness Training complimented with phishing testing that you can truly know that your employees are learning and getting better at spotting malicious emails before they make the mistake and interact with them.

Discover Your Organization’s Exposed Email Attack Surface

Cybercriminals constantly scan the deep web and thousands of breach databases to find exposed employee identities, credentials, and passwords to launch targeted social engineering attacks. Run our free Email Exposure Check Pro (EEC) to safely uncover your at-risk users and see what your organizational structure looks like to an attacker before they exploit it.

Get Your Free Email Exposure Report

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.