The Dutch Data Protection Authority has issued a warning about the increasing sophistication of phishing attacks and cybercrime due to the rapid expansion of artificial intelligence. This development calls for immediate action from organizations to bolster their cybersecurity defenses. The regulator points out that AI is being leveraged by cybercriminals to craft highly convincing and customized phishing emails, utilizing information from past data breaches to enhance their effectiveness.
These advanced phishing tactics have led to a surge in account takeover incidents, which pose significant threats to organizations by potentially enabling larger-scale cyberattacks. According to the authority, the number of such incidents has risen sharply, from 607 cases in 2024 to 1,742 in 2025. This alarming increase underscores the urgent need for stronger cybersecurity measures.
In addition to this rise in account takeovers, the authority received 39,407 data breach notifications in 2025 alone. These figures shed light on the escalating cybersecurity challenges confronting both businesses and public institutions. The growing number of breaches highlights the vulnerabilities that organizations must address to protect sensitive information.
To mitigate these risks, the regulator recommends that organizations adopt comprehensive cybersecurity policies and enhance their data protection practices. This includes avoiding the storage of sensitive information in centralized systems, which can be particularly attractive targets for cyberattacks. By implementing these measures, organizations can reduce the likelihood of falling victim to large-scale cybercrimes.