AI-generated phishing emails drive surge in cyberattacks in Baden-Württemberg
Cybercriminals are using AI to generate highly convincing phishing emails at scale in Baden-Württemberg, according to the regional cybersecurity agency. Phishing attacks tripled in 2025, with fraudulent online shops and password breaches also surging dramatically across public institutions, businesses, universities and private recipients.
What happened
According to the Cybersicherheitsagentur Baden-Württemberg (CSBW), AI-generated phishing emails have become increasingly sophisticated and frequent, leading to a significant surge in cyberattacks across the region. The CSBW reported in its annual report that phishing attacks tripled in 2025 compared to the previous year, with AI making it considerably more likely for recipients to fall victim to these emails.
The agency notes that cybercriminals use AI to create phishing emails that appear more authentic and can be sent simultaneously to larger numbers of recipients. The CSBW observed that when a cyber group sends such emails to one million recipients with only a 0.1% success rate, it still results in 1,000 victims that the group can exploit.
Reported impact
Cases at local authorities, cities, municipalities and publicly-owned enterprises increased by nearly 50 percent compared to the previous year. Cases of fraudulent online shops surged by 1,230 percent, compromised or exposed passwords increased by 230 percent, and phishing attacks rose by 320 percent.
Universities and institutions of higher education also experienced an enormous increase in security-related incidents according to the CSBW.
Index analysis
The CSBW stated that 2026 represents a pivotal year regarding the pace and scope of changes driven by AI models, with it remaining entirely incalculable how quickly these developments will progress. The agency noted that the rising attack statistics do not exclusively reflect the actual threat landscape, as cybersecurity incidents can now be better detected and recorded.
Governance controls
The CSBW called for heightened awareness of cybersecurity across all organizational levels, from reception staff to senior management, from maintenance personnel to IT departments, and from office support to executive leadership.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.