The Dutch Data Protection Authority has issued a warning about the escalating sophistication of phishing attacks and cybercrime, driven by the rapid advancement of artificial intelligence. The agency has strongly urged organizations to swiftly bolster their cybersecurity defenses in response to these emerging threats.
Criminals are increasingly leveraging AI technology to craft highly convincing and personalized phishing emails, utilizing information gleaned from past data breaches. These enhanced phishing tactics often lead to account takeovers, which can serve as a gateway for more extensive cyberattacks on organizations.
The authority has noted a significant uptick in account takeover incidents, with reported cases soaring from 607 in 2024 to 1,742 in 2025. Additionally, the number of data breach notifications surged to 39,407 in 2025, underscoring the mounting cybersecurity challenges confronting both businesses and public institutions.
In light of these developments, the regulator has advised organizations to adopt comprehensive cybersecurity policies and enhance their data protection practices. One key recommendation is to avoid storing sensitive information in centralized systems, as a measure to mitigate the risk of large-scale cyberattacks.