Phishing Attacks Surge Amid Employee Data Exposure at Fortune 100 Companies

• •86% of Fortune 100 companies reported employee data exposure to phishing attacks.
• •78% of organizations experienced an increase in phishing volume in the past year.
• •AI-generated phishing attacks are becoming more sophisticated and harder to defend against.

SpyCloud's 2026 Phishing Pulse Report reveals a significant rise in phishing attacks, with 86% of Fortune 100 companies experiencing employee data exposure. The report indicates that 78% of organizations noted an increase in phishing volume over the past year, while 84% reported that AI-generated phishing attacks are becoming more prevalent. Phishing-as-a-Service (PhaaS) and AI technologies are enabling threat actors to launch sophisticated campaigns, targeting enterprise users five times more than malware infections. Key phishing methods include business email compromise (BEC) and session hijacking, with device code phishing exploiting OAuth workflows. Organizations are urged to enhance their visibility and remediation capabilities to counter these evolving threats.