Of the last million logins Push saw, 1 in 4 were password logins, not SSO.

Of the last million logins Push saw, 2 in 5 were not protected by MFA.

Of the last million logins Push saw, 1 in 5 used a weak, breached, or reused password.

SpyCloud recaptured 7 million stolen credential records for third-party applications in 2024, a 48% increase from the year prior.