The Dutch Data Protection Authority has sounded the alarm over the increasing sophistication of phishing attacks and cybercrime, fueled by the rapid advancement in artificial intelligence. This warning comes with an urgent call for organizations to bolster their cybersecurity defenses without delay. The authority emphasized that AI is enabling cybercriminals to craft exceptionally convincing and personalized phishing emails, often using information pieced together from previous data breaches.
The consequences of these phishing attacks can be severe, potentially leading to account takeovers. Once attackers gain control over accounts, they can orchestrate larger-scale cyberattacks against businesses and institutions, exacerbating the cybersecurity threat landscape. The authority’s data underscores this concern, noting a significant rise in account takeover incidents, which jumped from 607 cases in 2024 to 1,742 in 2025.
Furthermore, the Dutch regulator reported receiving 39,407 data breach notifications last year, a statistic that highlights the mounting challenges organizations face in safeguarding their digital assets. This surge in breaches underlines the urgent need for robust cybersecurity measures to protect sensitive information from malicious actors.
To address these growing threats, the authority recommends that organizations adopt comprehensive cybersecurity policies. Improving data protection practices and avoiding the storage of sensitive information in centralized systems are crucial steps to mitigate the risk of large-scale cyberattacks. By implementing these strategies, organizations can better shield themselves from the evolving tactics of cybercriminals.