The burgeoning use of artificial intelligence is transforming the landscape of cybercrime, warns the Dutch Data Protection Authority. The regulator highlights the increasing sophistication of phishing attacks, which are being cleverly crafted using AI technologies. This development calls for immediate action from organizations to bolster their cybersecurity defenses to fend off these evolving threats.
Criminals have become adept at utilizing AI to produce highly convincing phishing emails. By integrating information gathered from past data breaches, they can create personalized messages that are difficult to distinguish from legitimate communications. Such deceptive tactics have significant ramifications, as successful phishing attacks may lead to account takeovers. Once inside, attackers can exploit these accounts to orchestrate larger-scale cyberattacks on organizations.
Statistics from the Dutch regulator indicate a worrying trend in cybercrime. Account takeover incidents have surged dramatically, climbing from 607 cases in 2024 to a staggering 1,742 in 2025. Furthermore, the authority received 39,407 data breach notifications in 2025 alone, underscoring the escalating cybersecurity challenges that both businesses and public institutions must navigate.
In response to these threats, the data protection authority advises organizations to adopt robust cybersecurity policies. This includes enhancing data protection practices and reconsidering the storage of sensitive information in centralized systems, which are more vulnerable to large-scale cyberattacks. Strengthening these measures is crucial to mitigate the risks posed by increasingly sophisticated cybercriminal activities.