72% of senior executives have been victims of cyberattacks in the last 18 months

Senior executives are a top target for cybercriminals, with 72% of surveyed U.S. cybersecurity professionals reporting that this group had been the target of a cyberattack in the past 18 months. This trend, highlighted in GetApp’s 2024 Executive Cybersecurity Report, underscores the growing sophistication of attacks, including the increasing use of AI-generated deepfakes, which were involved in 27% of attacks.

Despite the clear and present threat, many organizations are not adapting their cybersecurity strategies to protect their key leaders. More than a third (37%) of companies globally do not provide specialized cybersecurity training to their senior executives, leaving a critical gap in their defenses.

“Corporate executives hold critical business data, which makes them a target for cybercriminals,” says David Jani, senior security analyst at GetApp. “Companies urgently need to prioritize specialized cybersecurity training for their leadership teams.”

The frequency of attacks is also rising. 69% of previously attacked U.S. companies have seen an increase in attacks over the past three years—above the global average of 58%. This increase coincides with an increase in attack sophistication. Notably, incidents involving AI-powered deepfakes and phishing schemes have increased, with senior executives being the primary targets.

More than half (54%) of U.S. companies have experienced at least one identity theft incident involving a senior executive in the past 18 months, a rate 13 points higher than the global average of 41%. Compared to the global average, U.S. CEOs also face a significantly higher risk of fraudulent financial transactions.

In response to these growing threats, companies are encouraged to implement comprehensive cybersecurity strategies that include ongoing training, the use of advanced security tools such as multi-factor authentication (MFA) and data encryption. Proactive measures such as regularly updating software, monitoring network activity and preparing for emerging threats such as deepfakes are also key.

Read the full report to learn more about how organizations can support executives in combating costly cyberattacks.