Akamai says AI bots make up 47.9% of commerce traffic, driving surge in attacks
AKAM•Attacks rose across APIs, DDoS and endpoints
- API-focused web attacks rose 9% year over year; 85% of commerce respondents reported an API incident, while 22% know which APIs expose sensitive data.
- Layer 7 DDoS activity hit commerce nearly 3 trillion times in 2025; retail accounted for 84% of the volume.
- From November 2025 to April 2026, endpoint threats skewed toward malware at 56.5% versus phishing at 37.6%; daily phishing rose to 134,600 in April.
Akamai flags commerce as most targeted industry
Akamai’s 2026 security report flagged commerce as the most targeted industry as agentic shopping tools expand attack surfaces.
As of December 2025, AI bots made up 47.9% of commerce traffic on Akamai’s network; over 70% of AI bot triggers came from training crawlers.
