![\"\"](\"https:\/\/p7q8s5f8.rocketcdn.me\/wp-content\/uploads\/2026\/07\/Sophos_State_of_Identity_Security_2026.png\" "\\"Sophos_State_of_Identity_Security_2026\\"")
<\/a><\/div>\n<\/p>\n
Seven in every 10 (71%) of\u00a0organisations\u00a0globally\u00a0suffered at least one identity-related breach in the past year, and\u00a0on average\u00a0organisations\u00a0reported\u00a0three separate incidents, according to Sophos.<\/p>\n
This is based on a vendor-agnostic survey\u00a0conducted in the first quarter of 2026\u00a0which covered\u00a05,000 IT and cybersecurity leaders across 17 countries, including the United States, the United Kingdom, Germany, France, Australia, Japan, India, Brazil and Singapore, in\u00a0organisations\u00a0with 100 to 5,000 employees across 14 industries.\u00a0<\/p>\n
The survey found that identity attacks are rarely one-off events with repeat victimisation reaching a notable level, with\u00a05%\u00a0of global respondents\u00a0reporting\u00a0six or more\u00a0breaches. These attacks are\u00a0driven primarily by human error and weak management of non-human identities (NHIs),\u00a0a challenge that is accelerating rapidly as agentic AI\u00a0accelerates attack processes.<\/p>\n
Two thirds of\u00a0the\u00a0ransomware victims (67%)\u00a0responding\u00a0to this survey\u00a0confirmed their ransomware incident\u00a0stemmed from an\u00a0identity attack,\u00a0establishing\u00a0identity compromise as a primary delivery mechanism for ransomware. Sophos X-Ops researchers have observed this consistently over the past year.\u00a0<\/p>\n
The financial\u00a0consequences are steep: the mean recovery cost reached\u00a0US$1.64 million, with a median of\u00a0US$750,000, and 73% of those affected faced costs of $250,000 or more.<\/p>\n
In Singapore, identity breaches were slightly higher than the global average, with\u00a072% of\u00a0organisations\u00a0reporting at least one identity-related security breach in the past 12 months, compared with\u00a071% globally.\u00a0<\/p>\n
\u201cIdentity has become the primary attack surface in modern cybersecurity, and this data shows most\u00a0organisations\u00a0are losing ground,\u201d said Ross McKerchar, CISO at Sophos. \u201cThe non-human identity problem is particularly urgent. AI agents are\u00a0being granted privileges faster than security teams can\u00a0track them, and\u00a0organisations\u00a0that\u00a0fail to\u00a0get ahead of this will find it an increasingly costly gap to close.\u201d<\/p>\n
Findings also show that, overall, 10% of\u00a0organisations\u00a0reported an identity breach that\u00a0impacted\u00a0their business in the last year with the primary consequences being data theft (49%) and ransomware (48%), and financial theft (47%).<\/p>\n
Also, visibility remains a critical weakness.\u00a0Only 24% of\u00a0organisations\u00a0continually\u00a0monitor for\u00a0unusual login attempts, and more than half check every three months or less.<\/p>\n
In addition, detection gaps persist as\u00a014% of breached\u00a0organisations\u00a0could not detect and stop their most significant identity attack before damage was done.<\/p>\n
Further, critical infrastructure are the most exposed.\u00a0Energy, oil\/gas, and utilities (80%) and federal\/central government (78%) reported the highest breach rates across all industries surveyed.<\/p>\n
The study also found that compliance struggles signal a broader risk.\u00a0Organisations\u00a0that found compliance requirements\u00a0very challenging\u00a0had a breach rate of 82.4%, a full 14 percentage points higher than those with lower compliance difficulty (68.3%).<\/p>\n
Human error (employees tricked into providing credentials) was cited in\u00a0nearly\u00a043%\u00a0of incidents. Weak NHI management, including API keys stored in code, static credentials, and orphaned service accounts, was cited in 41%.\u00a0<\/p>\n
Organisations\u00a0with weak NHI management are\u00a022% more likely to experience financial theft and pay approximately $150,000 more to recover than average.<\/p>\n
The NHI management problem is intensifying. AI agents can autonomously spin up sub-agents, each generating new credentials with broad, persistent access and inconsistent human oversight.\u00a0<\/p>\n
Existing identity frameworks were not built for this, and\u00a0organisations\u00a0are already behind: only one in three organisations regularly rotate or audit service accounts and non-human identities, and just 11% do so continuously.<\/p>\n
<\/a><\/div>\n<\/p><\/div>\n
\n
\n
Read Full Article At Source <\/a>
\n
Seven in every 10 (71%) of\u00a0organisations\u00a0globally\u00a0suffered at least one identity-related breach in the past year, and\u00a0on average\u00a0organisations\u00a0reported\u00a0three separate incidents, according to Sophos. This is based…<\/p>\n","protected":false},"author":1,"featured_media":70116,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[2611],"tags":[],"class_list":["post-70115","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buzz-headlines","wpcat-2611-id"],"_links":{"self":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/70115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=70115"}],"version-history":[{"count":0,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/70115\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/media\/70116"}],"wp:attachment":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=70115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=70115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=70115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}