84% of Organizations Hit by Digital Risk Incidents Last Year. Most Can't Detect an AI-Generated Attack.

84% of Organizations Hit by Digital Risk Incidents Last Year. Most Can't Detect an AI-Generated Attack.

Outtake Labs and Cybersecurity Insiders survey 900+ enterprise leaders in the first industry benchmark on digital risk maturity – and the results are a wake-up call.

Outtake, the next-gen digital risk platform, today released the 2026 State of Digital Risk Report, produced in partnership with Cybersecurity Insiders. Drawing on survey data from 900+ enterprise security, fraud, and risk leaders, it is the first comprehensive benchmark of how organizations detect, investigate, and respond to digital risk. The report also uncovered how far current programs fall short of the threat.

The findings are clear: 84% of organizations experienced material digital risk incidents in the past year, yet only 7% describe their program as "leading." Nearly seven in ten describe themselves as unaware, reactive, or still developing. The most common answer for who owns digital risk is no one, ranking above security operations, fraud, legal, and every other function combined. At every stage of the threat lifecycle: detection, investigation, response, and measurement, more than 60% of organizations are operating without adequate capability.