Vent: Just found out 76% of data breaches come from compromised login credentials - where did I find that stat?

I was digging through Verizon's 2024 Data Breach Investigations Report last night. Honestly I was just trying to kill time before bed and now I'm paranoid. That stat is insane. So basically most hacks happen because people use the same password everywhere or fall for phishing. Has anyone actually changed how they manage passwords after reading something like this?

3 comments

3 Comments

eric7231mo ago

Another thing nobody brings up is how many breaches come from MFA fatigue attacks. Verizon touched on it in that same report - people get spammed with push notifications until they just hit approve to make it stop. I actually watched a demo of this at a security meetup last month and it was SCARY how easy it works. So even if you have 2FA turned on everywhere, you still gotta be careful if a site lets you approve logins with just a tap. Some places let you require a one-time code instead of push notifications. That extra step saved me once when I accidentally clicked approve on a fake login prompt from my email.

pat_coleman2mo ago

Hang on, just a small correction - the Verizon DBIR actually says 74% for the 2023 report, not 76%. Still terrifying either way though lol. It definitely pushed me to get a password manager and turn on 2FA everywhere I could.

claire_ramirez2mo ago

Did you run into any issues setting up 2FA with older accounts that don't support it? I had a real headache with some banking sites until I just switched to using a password manager with TOTP built in.