SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks

SpyCloud reports that nearly 6 million phished records were recaptured from the criminal underground over six months, revealing that 94% of Fortune 50 companies had employee identity data exposed; roughly two-thirds of records contained credentials, financial information, or visitor metadata. The analysis warns that phishing is being industrialized via phishing-as-a-service and AI, increasing the scale and sophistication of attacks and enabling follow-on threats like account takeover and ransomware, and urges organizations to combine user training with actionable exposed-identity intelligence to proactively remediate risks.