AI phishing, breach reuse and supply chain risk: what changed?

TL;DR: AI has become a force multiplier for cyber threats in 2026, making phishing, voice cloning, breach reuse, ransomware, smishing and supply chain compromise easier to scale, according to Riot. That shift turns identity hygiene, verification habits and leaked-credential monitoring into operational controls, not awareness slogans.

Editorial analysis by NHI Mgmt Group, based on content published by Riot: “Cybersecurity Awareness Month 2026: The Year AI-Driven Attacks Went Mainstream”.

By the numbers:

• The share of French people notified that their personal data was compromised rose from 30% in 2025 to 45% in 2026.
• The US Identity Theft Resource Center tracked over 1,800 reported data compromises in the first half of 2026 alone.
• The first half of 2026 generated 471 million victim notices.

Key questions

Q: How should security teams reduce phishing and vishing risk when attacks use AI-generated content and voice cloning?

A: Security teams should treat phishing and vishing as identity and behavior problems, not just email problems.

Q: Why do reused passwords create such a large identity risk?

A: Reused passwords turn one disclosure into many possible logins.

Q: What are the signs that phishing-resistant controls are not being applied effectively?

A: A common warning sign is that users still authenticate with passwords, SMS codes, or push approvals for sensitive access while rare device registrations and unusual login events are not being reviewed.

Practitioner guidance

• Force side-channel verification for high-risk requests Require call-back or chat-back verification whenever a message requests urgency, payment, credential reset or policy exception.
• Eliminate password reuse exposure Prioritise unique passwords through a password manager, and move critical accounts to passkeys or phishing-resistant MFA wherever possible.
• Monitor leaked identity data continuously Track breach notifications, exposed credentials and suspicious recovery events as part of identity risk management.

Bottom line: AI has made phishing, impersonation and breach reuse cheaper to scale, so the practical control problem is now verification and identity hygiene, not message grammar.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →