Many IT Leaders Click Phishing Links — And Some Don’t Report Them

Cybersecurity risks continue to challenge organizations worldwide, and even senior IT leaders aren’t immune. A recent report by security firm Arctic Wolf reveals that nearly two-thirds of IT executives have clicked on phishing links — and 17% of them didn’t report the incident. Fear of punishment or job loss may be driving this reluctance, according to the report.

Alarmingly, almost 10% of respondents admitted to clicking on multiple phishing links without reporting them. Given that 70% of IT leaders reported being targeted by cyberattacks — including phishing (39%), malware (35%), and social engineering (31%) — this lack of reporting could leave organizations vulnerable.

Despite these statistics, more than three-quarters of IT leaders still expressed confidence that their organizations would not fall victim to phishing attacks. Arctic Wolf’s findings underscore the importance of continuous training, awareness programs, and robust reporting protocols.

The report also highlights trends in global data breaches. Between 2024 and 2025, Australia and New Zealand saw the largest increase in reported breaches (78% of organizations this year vs. 56% last year), while the U.S. remained stable and Nordic countries saw a slight decline.

AI tool usage within organizations also raised concerns. About 60% of IT leaders reported sharing confidential information with AI systems such as ChatGPT, compared with 41% of lower-level employees. Despite this, 43% of workers were unsure whether their organizations had policies guiding AI use, indicating a need for clearer communication and training on AI-related risks.

Key Takeaways for Organizations:

• IT leaders must lead by example in reporting cybersecurity incidents.
• Awareness and training programs should emphasize phishing and AI-related risks.
• Clear policies and enforcement are essential to protect sensitive data.

Protecting your organization from phishing and data breaches starts with vigilance and the right tools. Cybersecurity solutions, employee training, and proactive monitoring are crucial to safeguarding your business in today’s evolving digital landscape.

At CloudSpace, we understand the challenges IT leaders face with phishing attacks, data breaches, and AI-related risks. As a trusted provider of cybersecurity consulting in Houston, we help organizations safeguard sensitive data, implement robust security policies, and train staff to stay vigilant against cyber threats. Don’t leave your company’s security to chance — partner with CloudSpace today and strengthen your defenses.