67% of ransomware victims confirmed their ransomware incident stemmed from an identity attack.
| Publisher | Sophos |
| Report | The State of Identity Security 2026 |
| Published | 12 May 2026 |
| Topics | Ransomware, Identity Compromise |
Published by Sophos in The State of Identity Security 2026, 12 May 2026. The figure is taken from the report as published; the full methodology is in the source.