45% of organisations who only check for compromised passwords during expiry or reset events average only two checks for compromised passwords per year.

Only 50% of organisations scan for compromised passwords more than once a month.