Whiteswan's positioning rests on verified, sourced statistics — not marketing-rounded numbers. This page is where every figure we use gets its full source and methodology, so you can verify it yourself rather than take our word for it.
93% of organizations had two or more identity-related breaches in the past 12 months.
Source: CyberArk, 2024 Identity Security Threat Landscape Report. Global survey of 2,400 security decision-makers across 18 countries, conducted by Vanson Bourne.
This is repeat victimization, not a one-time incident rate — organizations that get breached once are, overwhelmingly, getting breached again. The same report found that 93% of organizations also anticipate a negative impact from AI as malicious actors exploit the same technology.
87% of organizations experienced attacks targeting machine identities in the past year, with nearly half resulting in unauthorized access to critical systems.
Source: CyberArk, 2024 Identity Security Threat Landscape Report.
71% of organizations suffered at least one identity-related breach in the past year.
Source: Sophos, State of Identity Security 2026. Vendor-agnostic survey of 5,000 IT and cybersecurity leaders across 17 countries.
Sophos's research also ties the surge directly to AI: attacks are driven primarily by human error and weak management of non-human identities — a challenge growing rapidly as agentic AI accelerates attack processes, with AI agents able to autonomously spin up sub-agents that generate new credentials with broad, persistent access.
This page is updated when a major new report publishes — not on a content calendar. If you've seen a figure on the Whiteswan site and want to verify it, it's sourced here.
See how one engine governs every identity in your estate.
Contact →See how Whiteswan decides, in-line, at the moment of action.
See how it works →