SpyCloud：2023 年度身份暴露报告（英文版）（19页）.pdf

1、 ANNUALIDENTITYEXPOSUREREPORT2022 HighlightsTop 2022 Trends Growing Credential Exposure due to Malware Government Sector Remains at High Risk Vast PII Exposure Helps Criminals InnovateSpotlight on Malware:How Infections Create Identity Exposure Session Cookies:The Ultimate StealTop Notable Data Brea

2、ches of 2022Taking Action on Stolen DataProtecting Your Organization from Digital Identity ExposureWhats NextAbout SpyCloud TABLE OF CONTENTS36691112141517181819721MILLIONTOTAL EXPOSED CREDENTIALS1,316TOTAL BREACH SOURCESof users in 2022 breaches werereusing previously exposed passwords72%8.6 BILLIO

3、Ntotal PII recaptured19,921,715average breach sizeIN 2022:1.8 BILLIONphone numbers1.4 BILLIONfull names802 MILLIONaddresses753 MILLIONsocial media handles416 MILLIONdates of birth332 MILLIONinternational IDs/full SSNs2.5 MILLIONbank account#shi,my name is.MARCH336.5 MILLIONdrivers licenses/passport#

4、s67 MILLIONcredit card#sGOVERNMENT391,343credentials61%US&INTL password reuse rate123456#1 reused plaintext password!MALWARE22.3 MILLIONunique infected machines22 BILLIONdevice and session cookies1234567 MILLION261,496TOP PLAINTEXTPASSWORDLOVE/FAMILYTHEMESTREAMING&TV SERVICESTRENDINGMUSICALARTISTS23

5、8,597PASSWORD TRENDSANNUAL IDENTITY EXPOSURE REPORT 2023 3recordsOVERVIEWFor the last six years,SpyCloud has examined the trends related to identity exposure in the criminal underground to understand how this data puts organizations and consumers at risk of cybercrime including ransomware attacks,da

6、ta breaches,account takeovers,and online fraud.Every year,SpyClouds researchers analyze the data theyve recaptured during the last 12 months from the deepest layers of the darknet and explore the implications of these findings.Our annual Identity Exposure Report is the result of our research into th