A recent SpyCloud report found that phishing attacks have been growing in scale and sophistication. According to the report, 94% of Fortune 50 companies have employee identity data exposed as a consequence of phishing attacks.

Eighty-one percent of these records contain email addresses, 42% include IP addresses, and 31% include user-agent information identifying device and browser details.

The top impersonated industries in phishing campaigns include: telecommunications, IT, and financial services. Two thirds of the 5.5 million records contained credentials, financial information, or visitor metadata, while 37% came from email targeting lists (a collection of addresses selected for phishing attempts, not necessarily resulting in compromise).