Most of the recent PII data breaches are responsible by phishing attacks. Phishing is the primary cause of many recent PII breaches, as it involves tricking individuals into divulging personal information or downloading malware that leads to data theft. This is supported by multiple sources indicating phishing as the main culprit behind recent PII breaches.

Additionally, ransomware and social engineering attacks, which include phishing, have been significant factors in recent breaches, according to extensive breach reports for 2025.