Stolen Insecure Credentials Behind Most Breaches

Stolen insecure credentials behind most breaches

Valid account credentials without multi-factor authentication continued to be the dominant initial access vector in cyberattacks last quarter, accounting for 56% of all cybersecurity incidents during the first three mont…

Rapid7 Q1 2025 incident response findings

Rapid7’s Q1 2025 report reveals stolen credentials without MFA cause 56% of breaches, while manufacturing faces the highest threat from ransomware attacks.

56 percent of security incidents caused by lack of MFA

Valid account credentials -- with no MFA in place to protect the organization should they bemisused -- are still by far and away the biggest stumbling block for organizations investigatedby the Rapid7 IR team, occurring in 56 percent of all incidents in the first quarter of 2025. Exposed RDP services account for six percent of incidents as the initial access vector (IAV) and were abused by attackers more generally in 44 percent of incidents. In …