Last year, 90% of organizations faced an identity incident

A report by the Identity Defined Security Alliance (IDSA) investigated identity security systems in large organizations. The study exposed trends in common identity incident vectors and organizational influence. It also evaluated the impact of factors like cyber insurance, artificial intelligence (AI), and regulatory changes. Of the organizations studied, 90% reported an identity-related event in the past year, consistent with the previous year’s percentage.

Additional key findings from the report include:

• The most common identity-related incident was phishing, at 69%.
• Stolen credentials were the second most prevalent incident, accounting for 37% of identity-related issues.
• Direct business impacts were felt by 84% of identity stakeholders, marking an increase from 68% in 2023.
• 45% of companies reported a negative reputational impact following an identity incident, up from 25% in 2023.

Managing identity sprawl is a priority for 57% of organizations.