54% say they Ensure compliance with data privacy regulations like GDPR to safeguard AI use for traffic monitoring/analysis are.

50% of IT and cybersecurity professionals say they Deploy strict access controls for AI models to safeguard AI use for traffic monitoring/analysis are.

44% of IT and cybersecurity professionals say they use data anonymisation techniques to safeguard AI use for traffic monitoring/analysis are.

Responsibility for CT security often lies with the CTO (43%) and CIO (32%).

51% of IT and cybersecurity professionals say they encrypt data at rest and in transit to safeguard AI use for traffic monitoring/analysis are.

Brands are popular in passwords, with "Google" appearing in 25.9 million entries, "Facebook" in 18.7 million, "Kia" in 12.7 million.

The sequence “1234” appears in almost 4% of all passwords, which is over 727 million passwords.

Popular pop culture terms used in passwords include “Mario” (9.6 million), “Joker” (3.1 million), “Batman” (3.9 million), “Thor” (6.2 million), and “Elsa” (2.9 million).

Positive words in passwords were common: “love” (87 million), “sun” (34 million), “dream” (6.1 million), “joy” (6.9 million), and “freedom” (2 million).

"Ana" was the most popular name component, used in almost 1%, or 178.8 million passwords. It also appears in words like “banana” (used in 3.7 million passwords).

Months are popular in passwords, with "May" appearing in 28 million entries and "April" in 5.2 million.

Almost a third (27%) of the analysed passwords consisted of only lowercase letters and digits.

Animals are common in passwords: "lion" (9.8 million), "fox" (7.8 million).

Of 479 ransomware attacks logged in April 2025, 39 attacks were confirmed by the targeted entity through means such as a data breach notification or press release.

Specific Data Amounts Allegedly Stolen: DaVita Inc. (healthcare, US): 1.5 TB of data allegedly stolen by Interlock, ChangShen Hospital (healthcare, Taiwan): 800 GB of data stolen by NightSpire, Sasszemklinika (healthcare, Hungary): 101 GB stolen by Qilin, Saint James Hospital Group: 250 GB stolen, claimed by INC, Oregon Department of Environmental Quality (DEQ): Qilin claims a breach of over 2.5 TB of data, though DEQ denies evidence of a breach, Toppan Next Tech (business, Singapore): 12 GB of data stolen by Akira, involving a data breach affecting at least 11,200 people (including 3,000 from Bank of China and 8,200 from DBS Group), FAKO-M Getränke GmbH & Co. KG (business, Germany): Sarcoma claims to have stolen 446 GB of data, Fleet Canada, Inc. (business): Silent alleged to have stolen 600 GB, Versa Networks (business): Silent alleged to have stolen 854 GB.

Religious terms are popular in passwords, with “god” appearing in 24 million entries, “hell” in 20 million.

Breakdown of Confirmed Attacks (39 total) by Sector in April 2025: Businesses: 21 confirmed attacks, Government Entities: 9 confirmed attacks, Healthcare Companies: 6 confirmed attacks, Educational Institutions: 3 confirmed attacks.

Most Prolific Ransomware Gangs (based on attack claims) in April 2025: Qilin: 67 claims. This is an increase from 45 claims in March, Akira: 62 claims, Play: 50 claims, Lynx: 32 claims, NightSpire: 22 claims. RansomHub listed no new victims in April.

Breakdown of Unconfirmed Attacks (440 total) by Sector in April 2025: Businesses: 396 unconfirmed attacks, Government Entities: 16 unconfirmed attacks, Healthcare Companies: 16 unconfirmed attacks, Educational Institutions: 11 unconfirmed attacks/

Extending this, “123456” is used in 338 million passwords. Both “password” (56 million) and “admin” (53 million) remain highly popular, being the most popular passwords at least since 2011.