Austin, TX, United States, March 19, 2025/CyberNewsWire/-- SpyCloud, the leading identity threat protection company, has published its 2025 Annual Identity Exposure Report, highlighting the increase in identity data exposed on the darknet as the top cyber risk facing businesses today.
Cybercriminals have evolved beyond stealing individual credentials, using data stolen from various sources such as security breaches, malware, and phishing attempts. They now apply more sophisticated strategies to exploit digital identities, forcing organizations to adopt more comprehensive and holistic defense approaches.
Holistic Identity: The New Cyber Battlefield
Companies have traditionally focused their efforts on protecting individual credentials, but SpyCloud's analysis shows that attackers have expanded their tactics beyond account hijacking. With access to identity information from multiple sources, cybercriminals can leverage leaked data to gain deeper access into their victims' digital ecosystem.
SpyCloud's collection of data recovered from the darknet increased by 22% in the past year, reaching over 53.3 billion distinct identity records and more than 750 billion stolen assets in circulation on the underground market. These assets include personal and professional credentials, session cookies, personally identifiable information (PII), financial data, IP addresses, and national identification documents, among others.
New Paradigm in Identity Risk Assessment
Attackers are using historical and current data to bypass conventional security protections. Until now, cybersecurity tools only allowed visibility into a portion of an individual's exposed data, without a complete correlation between different information sources. However, the SpyCloud report demonstrates that identity exposure has become even more complex, providing criminals with a roadmap to exploit vulnerabilities.
- In the corporate sphere, the average corporate user has 146 stolen records linked to their identity, including 13 unique email addresses and 141 credential combinations.
- At the consumer level, the number of stolen records is even higher, with an average of 229 records per person, including sensitive information such as full names, dates of birth, phone numbers, and financial data.
In 2024, incidents like the massive MOAB leak and the rise of phishing campaigns have demonstrated how vast the amount of exposed identity data is. Understanding how cybercriminals group stolen data and apply new fraud techniques allows organizations to proactively address these risks before they become threats.
Key Report Data
- 17.3 billion cookies were recovered from malware-infected devices, allowing attackers to bypass multi-factor authentication (MFA) and hijack active sessions.
- 548 million credentials were exfiltrated through information-stealing malware.
- 3.1 billion passwords were recovered in 2024, a 125% increase compared to the previous year.
- 70% of users whose credentials were exposed in security breaches reused previously compromised passwords, increasing the risk of attacks.
- In the government sector, SpyCloud recovered 127,000 credentials with a .gov domain, observing a password reuse rate of 67%.
Evolving Cybersecurity Strategies
These findings highlight that cybercriminal tactics have evolved beyond traditional methods and that companies must reconsider their defense approaches. SpyCloud uses advanced identity analytics to help organizations correlate scattered identity elements and strengthen their threat protection strategies.
Q2BSTUDIO: Innovation and Protection in Technological Development
In an increasingly challenging digital environment, companies like Q2BSTUDIO play a key role in implementing advanced technological solutions that enhance security and optimize business processes. From software development to customized technology services, Q2BSTUDIO specializes in providing innovative tools tailored to each client's needs.
With a comprehensive vision of digital development and cybersecurity, Q2BSTUDIO helps companies strengthen their technological ecosystems, minimize identity risks, and improve data protection through tailored strategies. Digital transformation and cybersecurity must go hand in hand, and at Q2BSTUDIO we integrate both areas to ensure effective and secure solutions.
