Phishing Attacks Are Surging — Is Your Team Ready?

Over recent months, we’ve seen a sharp rise in phishing activity across our client base — from care providers and financial services to retail and non-profits. Attacks are becoming more sophisticated, more targeted and, crucially, far more convincing.
And it isn’t just us seeing the escalation. Darktrace’s global analyst team recently reported that Christmas-themed phishing attacks jumped 327%, while Black Friday and Cyber Monday–themed attacks surged 692% compared to early November — evidence of cybercriminals exploiting peak trading periods. (Full report: darktrace.com/blog/phishing-attacks-surge-in-buildup-to-black-friday)
These findings reflect broader national trends. A 2025 UK survey found that 99.6% of retail IT security professionals experienced an increase in cyber threats, with phishing and help-desk impersonation scams among the most common. Frontline teams in particular are being targeted with emails crafted to appear urgent, routine or familiar. The report also identified supply chain exposure as a major vulnerability, with 46% viewing third-party suppliers as their greatest risk. (Source: KnowBe4 – UK Retail Sector Report)
327%
increase in Christmas-themed phishing attacks
692%
surge in Black Friday and Cyber Monday–themed attacks
Despite advances in security technology, one constant remains:
Your biggest cybersecurity risk is still your people.
Not because they’re careless — but because today’s phishing emails are engineered to look real. A single hurried click can lead to data breaches, financial loss, downtime or compromise of customer information.
At Cranborne, we believe the strongest defence is practical, real-world awareness. When staff recognise threats instinctively, your organisation becomes significantly harder to attack.
Free Phishing Simulation for Cranborne Customers
To help you understand your current exposure, we’re offering a complimentary phishing simulation for all Cranborne clients.
Your free simulation includes:
• A realistic, sector-appropriate phishing test
• Anonymous results and insights into user interaction
• A clear breakdown of your organisation’s risk profile
• Practical recommendations to improve awareness
• Optional follow-up training where useful
No obligation — simply a practical way to assess risk and give your team the confidence to spot threats before they escalate.
We deliver this using Usecure, a leading human-risk management platform that helps reduce the likelihood of human error.
Usecure includes:
•
uLearn – security awareness & compliance training
•
uPhish – realistic phishing simulations
•
uBreach – email breach detection
•
uPolicy – policy management and tracking
If you’d like Cranborne to run your free simulation, submit the form above.
A more informed team is a safer organisation — and we’re here to help.



