In 2025, identity-related incidents represented a significant portion of security breaches, with a staggering 76% of organizations reporting these attacks accounted for up to 50% of their total breaches, according to a new report from Permiso Security. The findings from the "Permiso State of Identity Security 2026" study highlight deepening vulnerabilities linked to identity security, particularly as artificial intelligence technologies become more widespread.
Access to sensitive information is increasingly compromised through credentials from employees, vendors, and AI systems rather than traditional hacking methods. Alarmingly, only 46% of organizations have a clear view of all identities in their systems, limiting their ability to respond to potential threats. Furthermore, just 43% can identify risks prior to an incident, and a mere 29% are able to gauge breach severity within minutes.
The report notes that 95% of organizations recognize that AI can autonomously create and alter identities, with nearly 40% of respondents admitting these systems access up to 50% of sensitive data. Paul Nguyen, Co-CEO of Permiso Security, stressed the urgent need for enhanced identity visibility, arguing that organizations are outpacing their security measures in this rapidly evolving landscape.