72% of organizations do not detect credential misuse in real time, often taking hours or sometimes days or weeks to identify unauthorized privileged access.

51% of U.S. cybersecurity decision-makers identify AI-related Non-Human Identity management and security as a top identity governance gap.

43% of cybersecurity decision-makers globally identify AI-related Non-Human Identity management and security as a top identity governance gap.

67% of U.S. cybersecurity decision-makers are concerned about employees inadvertently exposing sensitive information to AI systems.

Only one in nine global ransomware attacks were publicly disclosed in Q1 2026.

There were 2,160 undisclosed ransomware attacks identified in Q1 2026.

The Gentlemen claimed 273 attacks since its emergence in 2025 through the end of Q1 2026.

Data exfiltration occured in 96% of ransomware attacks in Q1 2026.

The average volume of data stolen per undisclosed ransomware incident was 743 GB in Q1 2026.

Organizations across 39 countries were impacted by disclosed ransomware attacks in Q1 2026.

Organizations coordinate an average of seven AI models in production.

77% of organizations report that inference is their dominant AI activity.

Nearly 29% of organizations identify prompt layers as the top AI delivery mechanism.

23% of organizations prioritize token layers for AI delivery and security.

78% of organizations run AI inference themselves.

91% of U.S. organizations indicate that AI will strengthen their security posture.

In the U.S., the confirmed cyberattack rate is 34%, two percentage points above the global average.

34% of U.S. organizations experienced a confirmed cyberattack in the past year, compared with 32% globally.

76% of U.S. organizations lack complete identity visibility across their workforce, two percentage points higher than the global average.

75% of U.S. organizations plan to increase security spending in 2026, three percentage points above the global average.