Skip to main content

Cybersecurity statistics / Credentials

13% of employees say they’ve sold or know someone who has sold company login details – often under the belief it’s harmless

PublisherCifas
ReportWorkplace Fraud Trends 2025
Published4 May 2026
TopicsCredentials, Login Details, Insider Threat, Insider Risk

Published by Cifas in Workplace Fraud Trends 2025, 4 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

36% of restaurants experienced phishing targeting staff credentials as a form of social engineering in the past year.
VikingCloud, 12/07/2026
66% of business partner users admit to sharing or borrowing credentials
Thales, 27/05/2026
Each compromised device yielded an average of 87 stolen credentials.
Recorded Future, 27/05/2026
90% more credentials were identified in the last three months of 2025 than in the first three months
Recorded Future, 27/05/2026
Over half of all credentials (53%) were indexed within one week of exfiltration, and 36.4% within 24 hours.
Recorded Future, 27/05/2026
276 million of the credentials indexed in 2025 included active session cookies.
Recorded Future, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.