# Proofpoint State of the Phish Report

> An annual benchmark on phishing susceptibility, security awareness, and human-risk behavior.

Proofpoint's 2024 report drew on telemetry from more than 2.8 trillion scanned emails across 230,000+ organizations and 183 million simulated phishing attacks over 12 months, plus survey responses from 7,500 employees and 1,050 security professionals across 15 countries, finding 68% of employees knowingly took risky actions despite awareness training.

- **Category:** [Research & Reports](https://gracker.ai/cyber-resources/research)
- **Website:** https://www.proofpoint.com/us/resources/threat-reports/state-of-phish
- **Location:** Sunnyvale, CA, USA
- **Verified:** Yes
- **Last updated:** August 11, 2026

## Frequently asked questions

### What is Proofpoint State of the Phish Report?

State of the Phish is Proofpoint's annual report analyzing real-world phishing simulation data alongside global end-user and security-professional survey findings, a widely cited benchmark for security-awareness content.

### Where is Proofpoint State of the Phish Report based?

Proofpoint State of the Phish Report is based in Sunnyvale, CA, USA.

### What is Proofpoint State of the Phish Report listed under on Cyber Resources?

Proofpoint State of the Phish Report is listed in the Research & Reports category of Cyber Resources, the curated directory of the cybersecurity marketing and growth ecosystem.