Skip to main content
VendorsSpyCloud

SpyCloud

Cybersecurity reports and statistics published by SpyCloud

8 categories2 reports

Research Reports

Reports and publications from SpyCloud

Recent Statistics & Reports

Enterprise workforces are three times more likely to be targeted with phishing attacks than with infostealer malware.

5/27/2026
PhishingInfostealer Malware

There is an average of 50 exposed user credentials per infostealer malware infection.

5/27/2026
Infostealer MalwareCredential TheftExposed User Credentials

Passwords containing 'chiefs' or 'kansas city chiefs' appear 5 million times in exposed credentials.

5/27/2026
Password TrendsPassword Security

Among the exposed corporate credentials analyzed, 80% contain plaintext passwords.

5/27/2026
Corporate SecurityPassword HygieneCredentials

Passwords containing 'sweet', 'cookie', 'candy', 'cake', or 'pie' appear 5.7 million times in exposed credentials.

5/27/2026
Password TrendsPassword Security

The password '2025' appears 4.1 million times in exposed credentials.

5/27/2026
Password TrendsPassword Security

Passwords containing 'apple', 'banana', 'orange', 'strawberry', or 'fruit' appear 2.6 million times in exposed credentials.

5/27/2026
Password TrendsPassword Security

The password '67' or 'sixseven' appears 140.4 million times in exposed credentials.

5/27/2026
Password TrendsPassword Security

SpyCloud identified 1.1 million password manager master passwords circulating in underground sources.

5/27/2026
Password ManagersCredential TheftDark Web

Successful phishing attacks have surged 400% year-over-year.

5/27/2026
Phishing

There were 895,802 stolen credential records for enterprise AI tools observed by SpyCloud in 2024.

4/8/2025
CredentialsAI AI tools

SpyCloud recaptured over 1.7 million phished records between the ONNX and Caffeine PhaaS platforms in the second half of 2024.

4/8/2025
PhishingRecords

SpyCloud found 159,313 stolen credential records from popular password managers in 2024.

4/8/2025
CredentialsPassword manager

SpyCloud recaptured 7 million stolen credential records for third-party applications in 2024, a 48% increase from the year prior.

4/8/2025
CredentialsExposureLogin

93% of the recaptured passwords were cracked by SpyCloud and delivered as plaintext.

4/8/2025
CredentialsPasswordPlaintext

SpyCloud's research shows that 66% of malware infections occur on devices with endpoint security solutions installed.

4/8/2025
MalwareEndpoint protectionEndpoint

About half of the recaptured phished data included specific city or postal code information.

4/8/2025
PhishingRecordsLocation

Endpoint Detection and Antivirus Solutions miss 66% of malware infections.

4/8/2025
EDREndpoint detectionAV

Nearly one in two corporate users were already the victim of a malware infection in 2024.

4/8/2025
Malware

In the year prior to 2024, malware was the cause of 61% of all breaches.

4/8/2025
MalwareBreaches

Showing 1-20 of 41 results