---
title: New 'State of the Phish Report' Shows Major Rise in Phishing Impacts
description: 2018 State of the Phish Report from Wombat Security provides key details on cybersecurity awareness.
---

[SecureWorld News ](https://www.secureworld.io/industry-news)

# [New 'State of the Phish Report' Shows Major Rise in Phishing Impacts](https://www.secureworld.io/industry-news/state-of-the-phish-report-major-rise-phishing-impacts)

 Written by [Gretel Egan](https://www.secureworld.io/industry-news/author/gretel-egan) | Sun | Jan 28, 2018 | 3:30 PM Z

Wombat Security’s new [*State of the Phish™ Report*](https://www.wombatsecurity.com/state-of-the-phish)—an annual research study that pulls data from multiple sources—has revealed a major increase in technical and business impacts from phishing attacks between 2016 and 2017. The study shows year-over-year increases of more than 80% in reports of malware infections, account compromise, and data loss related to phishing attacks.  

*Source: Wombat Security, 2018 State of the Phish Report*

Wombat’s *State of the Phish Report* has become a trusted resource for infosec professionals who are seeking to better managed end-user risks related to social engineering attacks. This year’s report combines data and analysis from three key sources:

1. Tens of millions of simulated phishing attacks sent through Wombat’s [Security Education Platform](https://www.wombatsecurity.com/security-education) over a 12-month period
2. 10,000+ responses collected from quarterly surveys of Wombat’s database of infosec professionals (customers and non-customers) from more than 16 industries
3. A third-party survey of more than 3,000 technology users (1,000+ adults each in the US, UK, and Germany)

Other items covered in the report include:

- Business intelligence gathered from Wombat’s [simulated phishing](https://www.wombatsecurity.com/security-education/simulated-phishing-attacks) data, including average end-user click rates and variations by industry
- Insights related to the real-world experience of infosec professionals, including the efforts organizations are taking to educate users and the use of [consequence models](http://www.wombatsecurity.com/blog/carrot-vs.-stick-employee-cybersecurity-education) for repeat offenders
- Regional differences among organizations and end-users, including comparisons of awareness levels between US, UK, and German technology users
- A look at the emerging smishing (SMS/text message phishing) threat and how end-user knowledge levels influence risk

The full 2018 *State of the Phish Report* is available on the [Wombat Security website](https://www.wombatsecurity.com/state-of-the-phish). For additional insights from industry experts, register for the January 31st SecureWorld web conference, [*State of the Phish Report 2018: What Your Peers Are Doing to Reduce Successful Phishing Attacks*](https://www.secureworld.io/resources/state-of-the-phish-report-2018). You can join live or on-demand, and CPE credits are available.

[View full post](https://www.secureworld.io/industry-news/state-of-the-phish-report-major-rise-phishing-impacts)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Gretel Egan"
  },
  "dateModified" : "2020-06-01T20:46:22.089Z",
  "datePublished" : "2018-01-28T15:30:00Z",
  "headline" : "New 'State of the Phish Report' Shows Major Rise in Phishing Impacts",
  "image" : {
    "@type" : "ImageObject",
    "height" : 450,
    "url" : "https://cdn2.hubspot.net/hubfs/2221756/fishing%20gear.jpg",
    "width" : 587
  },
  "mainEntityOfPage" : "https://www.secureworld.io/industry-news/state-of-the-phish-report-major-rise-phishing-impacts",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/2221756/Logos/SWE/SWE_logo_full-long_forWHITEbackgrounds.jpg",
      "width" : 304.46954
    },
    "name" : "SecureWorld News"
  }
}
```