73% of APJ organisations suffered one or more identity breaches in the past year: Sophos
- Human error and poor non-human identity management are the root causes of most attacks - Agentic AI accelerates the risk Sophos, a global cybersecurity provider, has released the State of Identity Security 2026, a vendor-agnostic survey of 5,000 IT and cybersecurity leaders across 17 countries*. The survey found that 71% of organisations globally suffered at least one identity-related breach in the past year, and on average, organisations reported three separate incidents. Identity attacks are rarely one-off events with repeat victimisation reaching a notable level, with 5% even reporting six or more breaches globally, Sophos said. These attacks are driven primarily by human error and weak management of non-human identities (NHIs), a challenge that is accelerating rapidly as agentic AI accelerates attack processes. According to the company, NHIs can include API keys, service accounts, and AI agents, and often outnumber human identities by ratios as high as 100:1. Two thi...