Pindrop Survey Finds 74% of Security Leaders Report Deepfake Attacks
Original report publisher: not verified. Report discovered via Awesome Annual Security Reports.
Summary
A Pindrop survey of 250 U.S. enterprise security leaders found 74% report deepfake attacks, while 10% have purpose-built defenses. Among organizations affected or suspecting an attack, about 25% reported costs of at least $1 million.
Key points
- The survey, conducted by Wakefield Research in June 2026, polled 250 U.S. security leaders at organizations with at least 1,000 employees.
- While 93% of respondents said they were at least somewhat concerned about deepfake attacks, 10% reported using purpose-built defenses; 37% rely on legacy security tools.
- Among organizations that experienced or suspected a deepfake attack, approximately 25% reported costs of $1 million or more.
- Among affected organizations, 49% reported follow-up cyberattacks, 41% a data breach, and 37% sensitive data exposure.
- Seventy-five percent of respondents agreed deepfakes may not become a boardroom priority until a company leader is fooled or impersonated; 37% considered a single attack at least somewhat likely to put a company out of business.
- The report is published by Pindrop, a deepfake-detection vendor; its methodology notes a margin of sampling variation of up to 6.2 percentage points.
Article Details
- Publisher
- Pindrop
- Report Period
- 2026; survey conducted June 11–22, 2026
- Scope
- Survey of U.S. enterprise security leaders on deepfake attacks, defenses, and organizational readiness.
- Sample Size
- 250 U.S. security leaders at organizations with at least 1,000 employees
- Key Statistics
- 74% of surveyed security leaders reported deepfake attacks, while 10% said their organizations had purpose-built deepfake defense tools.
- Among organizations that experienced or suspected a deepfake attack, approximately 25% reported costs of $1 million or more.
- 49% of affected organizations reported follow-up cyberattacks, including ransomware.
- 37% of surveyed security leaders considered it at least somewhat likely that a single deepfake attack could put a company like theirs out of business.
- Pindrop reported that AI attacks in its customer base had grown 1,680% by the end of June 2026; the report compares this with the preceding six quarters.
- Recommendations
- Extend continuous, real-time verification to vulnerable communication channels, including calls and virtual meetings.
- Treat deepfakes as identity attacks and make their risks a board-level security priority.
- Enable detection at the point of interaction, when organizations need to assess whether a person is real.
People
Ajit GaddamQuoted as Head of Fraud, Financial Crimes, and Trust Systems at HealthEquity, discussing how AI changes trust and proof.Doug InnocentiQuoted as CISO of MoonPay on the value of having defenses available before an incident.Jim RouthQuoted as Chairman of The CISO Deepfake Defense Council and a former CSO/CISO in financial services and healthcare.
Threat Actors
Silent Ransom GroupThe report uses SRG as an abbreviation for The Silent Ransom Group, which it describes as targeting companies through social engineering.The Silent Ransom GroupThe report says the group targets companies, particularly law firms, using social engineering; it describes impersonation of IT professionals, obtaining remote desktop access, data exfiltration, and extortion.