2022 Fortune 1000 Identity Exposure Report

REPORT

2022 Fortune 1000 Identity Exposure Report

Image of SpyCloud's Fortune 1000 Identity Exposure Report

With the continued onslaught of data breaches and malware infections, account takeover and online fraud are serious security threats facing enterprises every day. Add to it employees’ bad habit of using weak and reused passwords, and that creates the perfect opportunity for malicious actors to take advantage.

To highlight the scope of the problem, SpyCloud analyzed the exposed data tied to employees of Fortune 1000 organizations in our database. For this analysis, we examined over 126 million Fortune 1000 employee breach records containing more than 687 million assets, all of which are available to cybercriminals and can be used for malicious purposes.

Download the report to see:

  • The sectors with the highest and most severe exposure
  • The most popular exposed passwords of Fortune 1000 employees
  • The impact of malware-infected employees and consumers
  • Infographics detailing credential exposure, password reuse rates, and more for all 21 Fortune 1000 sectors

Download the Report

Related Resources

2022 SpyCloud Identity Exposure Report
Report

2022 Annual Identity Exposure Report

Our annual reports analyzes the 15.5 billion assets we recaptured from the criminal underground last year, and how enterprises can use this information to protect themselves from ATO, malware, and ransomware, and protect their consumers from online fraud.

Read More

The SpyCloud Difference

Truly Actionable Recaptured Data

SpyCloud solutions are backed by the world’s most current and comprehensive repository of recaptured data from breaches, malware infections, and other underground sources – with billions of exposed credentials and PII. It’s the same data that fraudsters use, but we make it actionable to prevent account takeover, ransomware attacks, and online fraud.

stat-blocks-stacked

Check Your Exposure

See your real-time breach exposure details powered by SpyCloud data.

2022 Report: Identity Exposure of London’s FTSE 100

REPORT

2022 Report: Identity Exposure of London's FTSE 100

(And Their Subsidiaries)

Graphic of SpyCloud's 2022 FTSE Identity Exposure Report

As data breaches and malware infections continue to leak employees’ credentials and PII at a massive scale, their password reuse remains critically high, creating significant security risks for organisations and the consumers who rely on them to keep their data safe. 

A single set of employee credentials that have been exposed in a third-party breach can leave the door wide open for bad actors to gain entry into a corporate network – but we found that London’s FTSE 100 and their subsidiaries have 2.7 million pairs of exposed plaintext credentials in the criminal underground.

To provide a snapshot of employee identity exposures affecting major enterprises, SpyCloud analyzed the data we’ve recaptured from breaches, malware-infected devices, and other underground sources tied to FTSE 100 and subsidiary employees. We examined over 51 million assets, all of which are available on the criminal underground and can be used for malicious purposes.

  • The types of stolen FTSE 100 employee data criminals have access to, and the danger it presents to these organisations
  • The most popular exposed passwords of FTSE 100 employees
  • Which industries lead in exposed data and severity
  • The impact of malware-infected employees and consumers

Download the Report

Related Resources

2022 SpyCloud Identity Exposure Report
Report

2022 Annual Identity Exposure Report

Our annual reports analyzes the 15.5 billion assets we recaptured from the criminal underground last year, and how enterprises can use this information to protect themselves from ATO, malware, and ransomware, and protect their consumers from online fraud.

Read More

The SpyCloud Difference

Truly Actionable Recaptured Data

SpyCloud solutions are backed by the world’s most current and comprehensive repository of recaptured data from breaches, malware infections, and other underground sources – with billions of exposed credentials and PII. It’s the same data that fraudsters use, but we make it actionable to prevent account takeover, ransomware attacks, and online fraud.

stat-blocks-stacked

Check Your Exposure

See your real-time breach exposure details powered by SpyCloud data.

2022 Annual Identity Exposure Report

REPORT

2022 Annual Identity Exposure Report

2022 SpyCloud Identity Exposure Report

Last year, SpyCloud recaptured more than 15 billion credentials and PII assets from the criminal underground. That’s a 200% increase in assets recaptured compared to the prior year – ample data that fraudsters are exploiting for identity fraud, which impacts businesses and consumers alike.

Our annual report analyzes this data and sheds light on the trends we observed throughout the year, explaining how enterprises can use this information to protect themselves from account takeover, malware, and ransomware, and protect their consumers from online fraud.

Download the report to see:

  • The trends our researchers observed within cybercriminal communities over the last year
  • Why the rate of password reuse continues to rise
  • Popular passwords influenced by entertainment, politics, and sports (Marvel characters make frequent appearances!)
  • How this stolen data is used to perpetrate ransomware and other targeted attacks
  • The urgency of the malware problem, including a spotlight on RedLine Stealer, and why we’ve put even more focus on collecting bot logs from malware-infected devices
  • The top 12 notable breaches of 2021

Download the Report

Related Resources

Malware Infected User Guide
Whitepaper

Infected User Response Guide

Handy guide to decipher what it means when employee or consumer information appears on a botnet log, and how to contact infected users with an action plan.

Read More

The SpyCloud Difference

Truly Actionable Recaptured Data

SpyCloud solutions are backed by the world’s most current and comprehensive repository of recaptured data from breaches, malware infections, and other underground sources – with billions of exposed credentials and PII. It’s the same data that fraudsters use, but we make it actionable to prevent account takeover, ransomware attacks, and online fraud.

stat-blocks-stacked

Check Your Exposure

See your real-time breach exposure details powered by SpyCloud data.

Business Email Compromise 101

WHITEPAPER

Business Email Compromise 101

BEC Remains A Persistent Threat For One Big Reason
– It’s Still Really Effective
bec-101-whitepaper

According to the FBI’s Internet Crime Complaint Center (IC3), losses from BEC surpassed $1.8 billion in 2020 – an average of $93,000 per incident.

BEC is challenging to prevent, especially when vendors are compromised, but SpyCloud believes prevention begins with addressing the human attack surface, particularly the prevalence of poor password hygiene. When passwords are reused between employees’ or vendors’ work and personal accounts, credentials that have already been exposed in a data breach are fair game for use in BEC campaigns.

This report examines the very human problem of password reuse and the social engineering tactics used by criminals to dupe organizations. As this report explains, all it takes to steal from your business is a single compromised account.

Solution:

Account Takeover Prevention
Detect and automatically reset exposed credentials before criminals can exploit them to bypass MFA and take over accounts.
Download the PDF version of the whitepaper to print or share with others.

The SpyCloud Difference

Truly Actionable Recaptured Data

SpyCloud solutions are backed by the world’s most current and comprehensive repository of recaptured data from breaches, malware infections, and other underground sources – with billions of exposed credentials and PII. It’s the same data that fraudsters use, but we make it actionable to prevent account takeover, ransomware attacks, and online fraud.

stat-blocks-stacked

Check Your Exposure

See your real-time account takeover exposure details powered by SpyCloud data.