---
title: "Some Truly Startling Phishing Statistics | Phish Protection"
description: "Which phishing statistic is scarier? That 94% of organizations say they were hit with a phishing attack in 2018 or that the attacks themselves may be underrepor"
image: "https://phishprotection.com/og/blog/some-truly-startling-phishing-statistics.png"
canonical: "https://phishprotection.com/blog/some-truly-startling-phishing-statistics/"
---

Quick Answer

Which phishing statistic is scarier? That \[94% of organizations\](https://www.mimecast.com/resources/ebooks/dates/2018/7/the-state-of-email-security-2018-report/) say they were hit with a \*\*phishing attack\*\* in 2018 or that the \[attacks themselves may be underreported\](https://www.helpnetsecurity.com/2019/06/05/2019-state-of-cybersecurity-study/), even when it's required by law?

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fsome-truly-startling-phishing-statistics%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Some%20Truly%20Startling%20Phishing%20Statistics&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fsome-truly-startling-phishing-statistics%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fsome-truly-startling-phishing-statistics%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fsome-truly-startling-phishing-statistics%2F&title=Some%20Truly%20Startling%20Phishing%20Statistics "Share on Reddit") [ ](mailto:?subject=Some%20Truly%20Startling%20Phishing%20Statistics&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fsome-truly-startling-phishing-statistics%2F "Share via Email") 

![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/06/email-phishing-protection-3065.jpg) 

Which phishing statistic is scarier? That [94% of organizations](https://www.mimecast.com/resources/ebooks/dates/2018/7/the-state-of-email-security-2018-report/) say they were hit with a **phishing attack** in 2018 or that the [attacks themselves may be underreported](https://www.helpnetsecurity.com/2019/06/05/2019-state-of-cybersecurity-study/), even when it’s required by law?

How about [42% of public sector organizations](https://www.darkreading.com/threat-intelligence/robbinhood-inside-the-ransomware-that-slammed-baltimore/d/d-id/1334874?%5Fmc=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190606&cid=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190606&elq%5Fmid=91375&elq%5Fcid=28171904) had been hit with a disruptive **ransomware attack** in the last month? LAST MONTH!

What about the cost of these attacks? The city of Baltimore, which was hit with a ransomware attack but refused to pay the $80,000 ransom, has spent [$18 million trying to recover](https://beincrypto.com/baltimore-city-ransomware-attack-18-million/). And it’s not just money.

According to an article on the Dark Reading website, “Nearly 40% of respondents say they experienced _data loss as a result of email-based impersonation attacks_, 29% reported direct financial loss, 28% lost customers, and 27% admitted some employees lost their jobs.” Yes, it can cost you your job.

Is this problem go away? Nope. Cyberattacks are on the rise. In fact, [more than 50% of organizations reported seeing the volume of phishing attacks increase over the last twelve months](https://www.mimecast.com/resources/press-releases/dates/2018/7/state-of-email-security-report/). And we know from research that **phishing emails** are responsible for about [91 percent of cyber-attacks](https://cofense.com/enterprise-phishing-susceptibility-report/).

![Email phishing protection](https://media.mailhop.org/phishprotection/images/2019/06/email-phishing-protection-3065.jpg) 

The headlines are everywhere. The chances of it happening are high and the impact is enormous. And yet, successful attacks continue. Why?

There’s only one possible explanation: phishing fatigue (phatigue?). People are weary from the headlines and the warnings and the **awareness training** and have just tuned it all out.

How else can you explain so many successful phishing attacks when **phishing prevention technology** is ubiquitous, inexpensive and relatively easy to deploy? Why do so many companies fall victim before they start investigating prevention solutions?

Don’t be most companies. [Phish Protection](/) offers fast, easy to deploy, [cloud-based email security](/products/advanced-threat-defense/) with Advanced Threat Defense. You can protect your employees for as little as 30₵ per day. Do you think the city of Baltimore wishes now they had paid that?

## Topics

[ Phishing ](/tags/phishing/) 

![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Protect your inbox from phishing attacks

Real-time email security with 60-day free trial. No credit card required.

[Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) 

## Related Articles

[  Foundational 5m  0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks  Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[  Foundational 4m  13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization  Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[  Foundational 4m  All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center  May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[  Foundational 4m  2021 Phishing Trends You Need To Be Wary Of  Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Some Truly Startling Phishing Statistics","description":"Which phishing statistic is scarier? That 94% of organizations say they were hit with a phishing attack in 2018 or that the attacks themselves may be underrepor","url":"https://phishprotection.com/blog/some-truly-startling-phishing-statistics/","datePublished":"2019-06-12T07:49:32.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-06-12T07:49:32.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/some-truly-startling-phishing-statistics/"},"articleSection":"foundational","keywords":"Phishing","wordCount":320,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/06/email-phishing-protection-3065.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"Some Truly Startling Phishing Statistics","item":"https://phishprotection.com/blog/some-truly-startling-phishing-statistics/"}]}
```