Weak non-human identity (NHI) management was cited in 41% of identity incidents.

85% of organizations agree that fragmented identity systems and tools impact or delay their ability to detect and respond to identity-related threats.

Organizations that find compliance requirements very challenging have a breach rate of 82.4%, which is 14 percentage points higher than organizations with lower compliance difficulty (68.3%).

Human error (employees tricked into providing credentials) was cited in nearly 43% of identity incidents.

One-third of organizations regularly rotate or audit service accounts and non-human identities, while just 11% do so continuously.

97% of respondents reporting that tool fragmentation adds additional time to identity-related incidents, amounting to an average of 12 hours per incident.

14% of breached organizations cannot detect and stop their most significant identity attack before damage is done.

Energy, oil/gas, and utilities reported an 80% breach rate and federal/central government report a 78% breach rate, the highest across industries surveyed.

There has been a 156% increase in cyberattacks that target user logins, specifically attributed to info-stealing malware and advanced phishing kits.

Identity-driven threats account for 59% of all confirmed cases in early 2025.

61% of healthcare organizations reported at least one identity-related attack in the past year.

87% say their organization experienced at least two successful identity-centric breaches in the past 12 months.

The Red Canary's 2025 Threat Detection Report noted four times as many identity attacks compared to the 2024 edition.