2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

**Executive summary:** KnowBe4's 2026 Phishing by Industry Benchmarking Report analyzes millions of simulated phishing tests and finds a global baseline Phish-prone Percentage (PPP) of 33.2% that falls 40% after 90 days of training and 87% after 12 months; healthcare, insurance, and retail are the highest-risk industries, larger organizations show higher susceptibility, regional differences persist, and the emergence of generative AI increases phishing sophistication, underscoring the need for continuous, adaptive security awareness training.