73% of APJ organisations suffered one or more identity breaches in the past year: Sophos
- Human error and poor non-human identity management are the root causes of most attacks - Agentic AI accelerates the risk Sophos, a global cybersecurity provider, has released the State of Identity Security 2026, a vendor-agnostic survey of 5,000 IT and cybersecurity leaders across 17 countries*. The survey found that 71% of organisations globally suffered at least one identity-related breach in the past year, and on average, organisations reported three separate incidents. Source: Sophos landing page . Cover for the inaigural State of Identity Security 2026 report. Identity attacks are rarely one-off events with repeat victimisation reaching a notable level, with 5% even reporting six or more breaches globally, Sophos said. These attacks are driven primarily by human error and weak management of non-human identities (NHIs), a challenge that is accelerating rapidly as agentic AI accelerates attack processes. According to the company, NHIs can include API keys, service acco...