The Dutch Data Protection Authority has issued a warning about the escalating sophistication of phishing attacks and cybercrime due to the rapid advancement of artificial intelligence. The regulator is calling for immediate action from organizations to bolster their cybersecurity defenses in light of these developments.
Criminals are leveraging AI technology to craft highly convincing and personalized phishing emails, utilizing information gleaned from prior data breaches. This approach increases the likelihood of successful phishing attempts, which can result in account takeovers. Such breaches can serve as a gateway for attackers to carry out more extensive cyberattacks against organizations.
The authority has observed a significant surge in incidents involving account takeovers, with reported cases climbing from 607 in 2024 to 1,742 in 2025. Additionally, there were 39,407 data breach notifications filed in 2025, underscoring the mounting cybersecurity challenges that both businesses and public institutions are facing.
In response to these threats, the regulator is advising organizations to adopt comprehensive cybersecurity strategies. This includes enhancing data protection practices and avoiding the storage of sensitive information in centralized systems, which could be vulnerable to large-scale cyberattacks. These measures are seen as crucial steps in reducing the risk of becoming targets for cybercriminals.