The number of fraudulent new property leases and rentals reported rose 102 percentage points.

Reports of fraudulent federal student loans increased 111 percentage points.

51% of impersonation scams impersonated a general business.

Of attempted misuse attempts that involved financial accounts, 56% involved credit card accounts.

21% of impersonation scams impersonated a financial institution.

53% of reports of misuse involved account takeover.

Reports of stolen birth certificates spiked 612 percentage points.

Attempted misuse largely involved financial accounts (85%).

Human and machine identities are expected to double in 2025.

87% say their organization experienced at least two successful identity-centric breaches in the past 12 months.

There are 82 machine identities for every human in organizations worldwide.

70% of respondents say identity silos are a root cause of organizational cybersecurity risk.

88% of respondents say that, in their organization, the definition of a ‘privileged user’ applies solely to human identities.

68% say their organizations lack identity security controls for AI.

Nearly half (42%) of machine identities have sensitive or privileged access.

61% do not have identity security controls in place to secure cloud infrastructure and workloads.

The average exposure for a single employee identity in 2024, under a traditional exposure model, shows 11 records per employee, 1 unique username, 1 total username, 1 unique email, 11 total emails, 7 credential pairs, and 7 unique sources (breach, malware, or phish).

By using holistic identity matching for an individual employee, the average exposure increases to 146 records per employee, 22 unique usernames, 13 total usernames, 89 unique emails, 141 total emails, 57 credential pairs, and 8 unique sources. This represents more than 12x the exposed data compared to the traditional view.

Under holistic identity matching, the average exposure for a single consumer identity shows 229 records per customer, 52 unique usernames, 105 total usernames, 27 unique emails, 125 total emails, 227 credential pairs, and 9 unique sources.

Cloud-native and identity-enabled techniques surged in the Red Canary's 2025 Threat Detection Report, with Cloud Accounts, Email Forwarding Rule, and Email Hiding Rules ranking among the top five.