Cybersecurity statistics / Identity Breach

10% of organizations reported an identity breach that impacted their business in the last year.

Publisher	Sophos
Report	The State of Identity Security 2026
Published	12 May 2026
Topics	Identity Breach, Business Impact

Published by Sophos in The State of Identity Security 2026, 12 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

When identity breaches impact business, the primary consequences are data theft (49%), ransomware (48%), and financial theft (47%).

Sophos, 27/05/2026

Across multiple identity-related breach categories, 90% of organizations report a successful identity-related breach in the last 12 months, with 83% seeing it happen at least twice, and 76% experiencing it three or more times.

Palo Alto Networks, 27/05/2026

46% of cybersecurity leaders rank operational downtime as the most significant impact ransomware is likely to have on their organizations.

Absolute Security, 27/05/2026

No organizations reported experiencing zero material business impact from AI agent-related incidents.

Cloud Security Alliance (CSA) & Token Security, 27/05/2026

34% of incidents in the Automotive and Smart Mobility focus on business and operational disruption.

Upstream, 22/02/2026

29% of organizations had to delay a product or service launch as a result of security incidents in the past year.

Red Canary, 23/10/2025

Get the newsletter

Weekly cybersecurity statistics by email.