Skip to main content

CYBERSTATS

Security Intelligence

Back to Home

Nearly one in three attacks observed by X-Force used valid accounts.

IBM
April 17, 2025
Valid accountsCyber attack

Nearly one in three attacks observed by X-Force used valid accounts. — This cybersecurity statistic was published by IBM in April 2025. It covers topics including Valid accounts, Cyber attack. The original data appears in IBM X-Force 2025 Threat Intelligence Index. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 4/17/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Nearly one in three attacks observed by X-Force used valid accounts. This data was published by IBM and covers Valid accounts, Cyber attack.

Where does this data come from?

This statistic comes from IBM X-Force 2025 Threat Intelligence Index, published by IBM on April 17, 2025. You can view the original report at https://www.ibm.com/account/reg/us-en/signup?formid=urx-53633.

What cybersecurity topics does this cover?

This statistic relates to Valid accounts, Cyber attack. Browse more statistics on Valid accounts or from IBM .

Want More Statistics Like This?

Get the latest cybersecurity stats delivered to your inbox every week

Related Statistics

For Initial Access, the most observed technique by DirectDefense is Valid Accounts, which involves leveraging stolen credentials for unauthorized access. Alerts triggered for Initial Access include: First Ingress Authentication from Country, Multiple Country Ingress Authentications, Multiple Wireless Country Authentications.

DirectDefense•4/15/2025
MITRE ATT&CKInitial accessValid accounts

For Lateral Movement, the most observed technique by DirectDefense is Valid Accounts, using stolen credentials to escalate privileges. Alerts triggered for Lateral Movement include: Lateral Movement – Local Credentials.

DirectDefense•4/15/2025
MITRE ATT&CKLateral movementValid accounts

99% of organizations experienced at least one attack on their AI systems in the past year.

Palo Alto Networks•1/1/2026
AI systemsCyber attack

82% of organizations saw 11–50% of their data impacted from an attack.

index Engines•10/15/2025
Cyber attackCyber attack consequencesData

The amount of data most organizations got back after paying a ransom was 51–75%.

index Engines•10/15/2025
Cyber attackCyber attack consequencesRansom

44% of organizations suffered from multiple, damaging attacks.

index Engines•10/15/2025
Cyber attack

Browse by Topic

Valid accountsCyber attackMore from IBM

Stay Ahead of Cyber Threats

Join 1,000+ security professionals getting weekly insights