Seven in 10 Orgs Suffered An Identity Breach This Year
Summary
Sophos research surveying 5,000 IT and security leaders found 71% of organisations experienced at least one identity-related breach in the past year, with an average of three incidents per organisation and repeat victimisation common. Two-thirds of ransomware incidents stemmed from identity compromises, and the mean recovery cost reached $1.64 million (median $750,000), with 73% incurring $250,000 or more. The report blames human error (43%) and weak management of non-human identities (41%), warns that AI-driven agent proliferation is accelerating the NHI problem, and notes only 24% continuously monitor for unusual login attempts. Smaller organisations and certain sectors (energy, oil/gas, utilities, and central government) showed higher breach and detection-failure rates, while only one in three firms regularly rotate or audit service accounts and just 11% do so continuously.
Classifications
AskAI Classifications
LabelsLinked Companies
