Over 70% of organizations hit by identity breaches

### Executive Summary — The Sophos 'State of Identity Security 2026' survey of 5,000 IT and security leaders shows that over 70% of organizations experienced at least one identity-related breach in the past year, with stolen credentials, compromised service accounts, and social engineering as primary vectors; two-thirds of ransomware incidents were linked to identity compromise, detection failures were common across sectors and regions, and undetected incidents resulted in significant financial and operational impacts (mean recovery cost ~$1.64M, median $750K).