| Publisher | Obsidian Security |
| Report | SaaS Security Threat Report 2025 |
| Published | 1 January 2025 |
Published by Obsidian Security in SaaS Security Threat Report 2025, 1 January 2025. The figure is taken from the report as published; the full methodology is in the source.
| The healthcare sector experienced the highest number of SaaS breaches from September 2023-2024, accounting for 14% of the total. This was followed by state and local government at 13% and financial services at 11%. Obsidian Security, 01/01/2025 |
| The fastest time from initial access to data exfiltration was as little as 9 minutes. Obsidian Security, 01/01/2025 |
| 85% of SaaS breaches began with a compromised identity. Obsidian Security, 01/01/2025 |
| MFA failed to prevent attacks in 84% of incident responses. Obsidian Security, 01/01/2025 |
| Organizations typically deploy around 100 AI applications, with 60% lacking proper security controls or federation behind the IdP. Obsidian Security, 01/01/2025 |
| Organisations can achieve an 85% reduction in their SaaS attack surface with better security measures. Obsidian Security, 01/01/2025 |
Weekly cybersecurity statistics by email.