More than 700 million account information was leaked and 22 million devices were infected in 2022

CTOnews.com, March 15, according to the 2023 identity exposure report released by SpyCloud, security personnel found a total of 721.5 million account information leaked from major events in 2022, and more than 22 million devices worldwide were infected with malware.

According to the report, 50% of the leaked account information came from botnets. These tools are often used to deploy highly accurate information theft malware. These information theft programs enable cyber criminals to work on a large scale, steal valid credentials, cookie, auto-populate data and other valuable information, launch targeted attacks or sell profits on the dark Internet.

The researchers found 8.6 billion personally identifiable assets, including 1.4 billion full names, 332 million national identity cards / full social security numbers and 67 million credit card numbers.

The report also found 22 billion device and session cookies records that allow criminals to bypass MFA and hijack active sessions, thereby enabling them to access sensitive information.

Although more and more attention has been paid to security training in recent years, password usage is still very bad. CTOnews.com learned from the report that 72% of the user passwords leaked in 2022 are still reusing previously leaked passwords.

The full report is as follows: identity exposure report 2023