Ransomware attacks rose 55.1% year-over-year in the first four months of 2026 and reached an average of 171 incidents per month.

90% of companies running AI in production, using AI broadly, and operating on multi-tenant SaaS identity infrastructure reported a confirmed incident.

99% of organizations where AI is the primary driver of identity reevaluation and customers frequently demand proof of isolation reported a confirmed incident.

Organizations with over-privileged AI systems have a 76% incident rate, compared to a 17% incident rate for organizations that limit AI to only the privileges needed for the task.

Relying on static credentials for AI systems correlates with a 20-percentage-point increase in incident rates.

Organizations most confident in their AI deployments experience more than twice the incident rate of less confident peers.