Skip to content

Forrester Study: Only 48% of Companies Use MFA as Phishing Attacks Surge

Phishing attacks are getting smarter, and businesses aren't keeping up. Only half of companies use MFA, and most employees haven't received cybersecurity training.

In the picture we can see three boys standing near the desk on it, we can see two computer systems...
In the picture we can see three boys standing near the desk on it, we can see two computer systems towards them and one boy is talking into the microphone and they are in ID cards with red tags to it and behind them we can see a wall with an advertisement board and written on it as Russia imagine 2013.

Forrester Study: Only 48% of Companies Use MFA as Phishing Attacks Surge

A recent study by Forrester Consulting has revealed alarming trends in cybersecurity practices among businesses and individuals. Only 48% of companies use multi-factor authentication (MFA) across all applications, while 44% of global participants have fallen for phishing scams in the past year.

The study, conducted in 2025, found that 56% of respondents still rely on usernames and passwords as their primary method of authentication for professional accounts. This is concerning, given that 70% of respondents believe phishing attacks have become more successful with the use of AI.

Phishing attacks are indeed becoming more sophisticated, with 78% of participants agreeing to this trend. A significant 54% of those surveyed either mistook a phishing email for a genuine message or were uncertain of its legitimacy. Gen Z participants were particularly vulnerable, with 62% reporting interaction with phishing scams, higher than older groups.

The lack of 2fa usage is another worrying trend. Only 48% of companies use 2fa across all business applications and services. Even for personal emails, 29% have not enabled 2fa. In France, however, personal 2fa usage has seen a significant increase, from 29% in 2024 to 71% in 2025.

The study highlights the urgent need for businesses to adopt stronger authentication methods like 2fa and for individuals to be more vigilant against phishing scams. With phishing attacks becoming more sophisticated and successful, it's crucial for companies to provide cybersecurity training to their employees. Only 40% of respondents reported receiving such training, indicating a significant gap in current practices.

Read also:

Latest