product · May 13, 2026

Sophos 2026 Report Reveals 71% of Organizations Faced Identity Breaches Costing $1.64 Million Each

Share the canonical public link.

Sophos releases its 2026 Identity Threat Landscape Report on May 13, 2026, stating 71% of organizations suffered at least one identity-related breach in the past year, averaging three attacks per affected entity. The report, based on surveys of 5,000 IT leaders across 17 countries and 14 industries, identifies weak non-human identity management as the cause in 41% of breaches, with NHIs like API keys and AI agents outnumbering human identities up to 100:1. Ransomware incidents linked to identity compromises reached 67%, using stolen authentication for payload deployment. Only 34% of organizations audit service accounts regularly, compared to 2025's 28%. TechNadu notes overprivileged accounts amplified attacks in 52% of cases since 2024.

The body describes a Sophos report release with industry-wide statistics on identity breaches, which qualifies as a real event with moderate impact in the cybersecurity space but doesn't rise to a major company-defining event like an acquisition or executive change, so the 'notable' significance feels slightly inflated. The content packs in numerous verifiable specifics, including the report name, release date (May 13, 2026), survey details (5,000 IT leaders, 17 countries, 14 industries), and multiple percentages (71%, 41%, 67%, 34%, 28%, 52%) plus ratios (100:1) and the $1.64 million cost from the headline. The analysis field is explicitly '(none)', providing no strategic insight or context beyond the headline.

Supporting evidence