SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

SpyCloud's 2026 Phishing Pulse Report warns that enterprise-targeted phishing is increasing in volume and sophistication, fueled by AI-generated lures and phishing-as-a-service (PhaaS). The report combines a survey of large organizations and SpyCloud darknet recapture analysis, finding high rates of credential and token exposure (including 86% of Fortune 100 firms), growing use of AiTM/device-code phishing to steal session tokens, and persistent visibility/remediation gaps that allow attackers to achieve account takeover, session hijacking, and follow-on attacks.