Security Navigator 2026

We are issuing this correction notice to our Security Navigator 2026 report, originally published on 04/12/2025.

Following publication, we have identified some data coding errors that resulted in some data being incorrectly classified within the analysis contained in the Threat Detection Data section. As a result, some figures, charts and commentary in the original report were based on misclassified data. However, whilst some of the data was incorrect it does not materially change the main findings.

We have now corrected the coding issue and reprocessed the affected data. Updated graphs representing the corrected data can be seen below.

The primary affected area was that the Phishing & Phishing/Spear-Phishing categories were misclassified as Hacking instead of Social, correcting this has resulted in Social now accounting for 8% of total incidents as opposed to 0.23%.

We apologize for the error and for any confusion or inconvenience caused to readers, stakeholders, and others who may have relied on the original data. We have reviewed our data processing and quality assurance procedures and have introduced additional checks to reduce the risk of similar errors occurring in future.