Phishing Risk Across 5 Key US Industries: ANY.RUN Data & Mitigation Strategies

According to fresh ANY. RUN data, phishing exposure remains above 70% in several critical industries. This doesn’t happen because organizations aren’t protected enough. Companies have been implementing email filtering, MFA, and phishing-awareness training for years.

However, threats continue to evolve, and security methods that were highly effective yesterday can develop visibility gaps as attackers adapt.

In this article, ANY.RUN explores data-driven insights to get to the bottom of phishing risk across key industries in the United States and examines how SOC teams can mitigate it.

See our previous article on phishing risk among US-based financial organizations.

Key Executive Takeaways

• Phishing remains a cross-industry risk. Exposure is consistently high across critical US sectors, making it an organization-wide concern rather than an isolated email-security problem.
• Email is only the beginning of the attack chain. Archives, PDFs, links, redirects, and post-click activity create visibility gaps that email controls alone cannot cover.
• Phishing is increasingly targeting identity and access. AiTM, session theft, token abuse, and user-driven execution make attacks harder to detect and contain with traditional controls alone.
• Speed and visibility are critical to reducing exposure. Behavioral analysis helps SOC teams uncover evasive activity quickly and move from suspicious content to informed response faster.

According to fresh ANY. RUN data, phishing exposure remains above 70% in several critical industries. This doesn’t happen because organizations aren’t protected enough. Companies have been implementing email filtering, MFA, and phishing-awareness training for years.

However, threats continue to evolve, and security methods that were highly effective yesterday can develop visibility gaps as attackers adapt.

In this article, ANY.RUN explores data-driven insights to get to the bottom of phishing risk across key industries in the United States and examines how SOC teams can mitigate it.

See our previous article on phishing risk among US-based financial organizations.

Phishing Risk Remains High Across Critical Industries

Phishing exposure statistics based on ANY.RUN submissions data, 2026

As the statistics show, very different industries face almost the same level of phishing exposure. For several critical industries, that exposure is above average. According to ANY. RUN data, phishing exposure reaches 73. 4% in finance and 72. 2% in manufacturing .

Part of the reason lies in how quickly threat actors evolve and adapt their techniques. AI makes convincing social engineering easier to scale, while techniques such as AiTM phishing and session theft make identity compromise increasingly difficult to prevent.

Explore broader threat landscape with H1 2026 Cyber Risk Report

Phishing campaigns increasingly combine sophisticated social engineering with identity-focused techniques, legitimate services, and evasive delivery methods.