This shift is essential for defenders to proactively mitigate threats from stolen identity data before they escalate into full-scale cyberattacks.” Key Findings from the 2025 Annual Identity Exposure Report: The True Scale of Identity Exposure is Greater Than Previously Estimated By applying proprietary holistic identity matching, SpyCloud researchers discovered that the actual scale of exposure is, on average, more than twelve times larger than previously estimated – providing security teams with a clearer, more actionable picture of identity risk: 146 identity records per corporate user → compared to just 11 using traditional methods141 stolen credential pairs per user → versus just 7 with legacy visibility74% of recaptured consumer records include location data, increasing risks of fraud and identity theft With a holistic approach to identity security, enterprises can move beyond isolated credential leaks and better understand their interconnected exposures – empowering them to act before an attack occurs.
Weak Password Practices Continue to Undermine Security Despite growing awareness of identity threats, weak password practices remain a constant source of risk, making users easy targets for automated credential stuffing and account takeover attacks: 3.1 billion exposed passwords were recaptured – a 125% increase from last year70% of users exposed in breaches last year reused previously-exposed passwords across multiple accounts, up from 61% in 2023Most commonly exposed passwords include: "123456,” "Admin,” "Qwerty”Pop culture continues to drive popular password choices.
Fueling the expanded cybercrime economy is a rise in infostealer malware, with nearly 50% of corporate users having been infectedAUSTIN, Texas, March 19, 2025 (GLOBE NEWSWIRE) -- SpyCloud, the leader in identity threat protection, today released its 2025 SpyCloud Annual Identity Exposure Report, uncovering the staggering scale of digital identity sprawl, the growing risks organizations face, and actionable insights to combat cyber threats before they escalate.
The story "SpyCloud’s 2025 Identity Exposure Report Reveals Surging Identity-Based Threats as Stolen Identity Records Increase 22% from Last Year" has 752 words across 27 sentences, which will take approximately 4 - 7 minutes for the average person to read.
Which news outlet covered this story?
The story "SpyCloud’s 2025 Identity Exposure Report Reveals Surging Identity-Based Threats as Stolen Identity Records Increase 22% from Last Year" was covered 2 weeks ago by GlobeNewswire, a news publisher based in China.
How trustworthy is 'GlobeNewswire' news outlet?
GlobeNewswire is a fully independent (privately-owned) news outlet established in 1998 that covers mostly technology news.
The outlet is headquartered in China and publishes an average of 35 news stories per day.
It's most recent story was published 9 hours ago.
What do people currently think of this news story?
The sentiment for this story is currently Negative, indicating that people regard this as "bad news".
How do I report this news for inaccuracy?
You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.
