Phishing and social engineering have overtaken the dark web as the leading method used by cybercriminals to obtain stolen personal and corporate information.
This breakthrough comes according to the 2026 Enterprise Social Engineering Report. The findings mark a significant shift in how hackers operate and where organizations face their greatest exposure.
The report, compiled from surveys of more than 420 cybersecurity leaders across industries, found that only 4% of respondents were confident their employees’ personal data, including phone numbers, home addresses, and family details, was adequately protected from attackers. The remaining 96% admitted they could not say the same. Security professionals surveyed described the dark web as increasingly functioning as a secondary repository or “information dumpster” where already-stolen data is stored and traded, rather than the active source of fresh compromise it once represented.
Hackers are instead targeting live victims directly. Phishing campaigns use fraudulent emails and messages to trick employees into surrendering passwords, login credentials, and confidential business data. Vishing, or voice phishing, involves attackers calling employees while impersonating IT support staff or trusted colleagues, manipulating them into disclosing sensitive information in real time. Data brokers and criminal groups have become highly skilled at exploiting human psychology, and information obtained through these methods is sold on underground forums where it is used to access corporate networks.
Several high-profile incidents illustrate how effective these tactics have become. Jaguar Land Rover reportedly suffered losses after criminal groups Scattered Spider and ShinyHunters gained access through social engineering in 2025. British retailer Marks and Spencer was targeted by attackers who impersonated IT support staff to extract critical credentials. Casino operators Caesars Palace and MGM Resorts International also faced social engineering attacks that exposed sensitive business information.
Security experts warn that as technical defenses improve, human error remains the most exploitable vulnerability. Organizations must invest in employee awareness training, stronger authentication, and continuous monitoring to reduce exposure.
You can read the report here.
