90% of organizations experienced an identity breach in the past year

A report from the Identity Defined Security Alliance (IDSA) examined the identity security systems in large organizations. The study revealed trends in common identity incident vectors and direct organizational influencers. It also analyzed the impact of trends such as cyber insurance, artificial intelligence (AI), and the changing regulatory landscape. Of the organizations studied, 90% reported experiencing an identity-related event in the last year. This percentage remains consistent with the percentage expected in 2023.

Other key findings from the report include:

• The most common identity-related incident was phishing at 69%.
• Credential theft was the second most common incident, accounting for 37% of all identity-related incidents.
• 84% of identity stakeholders experienced direct business impact. This is an increase from 2023, when 68% reported direct business impact.
• 45% of companies reported negative reputational impacts following an identity breach, up from 2023 when 25% reported negative reputational impacts.

For 57% of companies, managing identity proliferation is a key concern.