The Dutch Data Protection Authority is raising alarms over the escalating threat of cybercrime, as artificial intelligence technology is increasingly being harnessed by criminals to conduct more sophisticated phishing attacks. The authority emphasizes the urgent need for organizations to bolster their cybersecurity defenses as these attacks become more advanced and targeted.
AI is being utilized to craft highly convincing phishing emails that are personalized using data from previous breaches, making it easier for attackers to trick recipients into divulging sensitive information. The consequences of these successful phishing attempts can be severe, potentially leading to account takeovers. Once access is gained, cybercriminals can launch more extensive attacks on organizations, amplifying the potential damage.
In a stark illustration of the growing threat, the authority noted a significant increase in account takeover incidents, which surged from 607 cases in 2024 to 1,742 cases in 2025. This rise is accompanied by an overwhelming number of data breach notifications, totaling 39,407 in 2025 alone, underscoring the mounting cybersecurity challenges faced by both businesses and public institutions.
To combat these escalating risks, the regulator advises organizations to adopt robust cybersecurity strategies. This includes implementing comprehensive policies, enhancing data protection practices, and avoiding the storage of sensitive information in centralized systems. By taking these steps, organizations can better protect themselves against the threat of large-scale cyberattacks.