The Dutch Data Protection Authority has issued a warning about the increasing sophistication of phishing attacks and cybercrime, fueled by the rapid advancement of artificial intelligence. The regulator emphasized the urgent need for organizations to enhance their cybersecurity defenses to combat these emerging threats.
Criminals are leveraging AI technologies to craft highly persuasive and personalized phishing emails by utilizing information from previous data breaches, the authority noted. Such attacks often result in account takeovers, which can serve as a gateway for larger cyberattacks against targeted organizations.
The authority highlighted a significant increase in account takeover incidents, with reported cases escalating from 607 in 2024 to 1,742 in 2025. Furthermore, there were 39,407 data breach notifications filed in 2025, underscoring the mounting cybersecurity challenges confronting businesses and public institutions alike.
In response, the regulator urged organizations to adopt comprehensive cybersecurity strategies, improve their data protection measures, and avoid storing sensitive information in centralized systems. These steps are critical to mitigating the risk of large-scale cyberattacks and safeguarding sensitive information from falling into the wrong hands.
