2026 State of MSP Threat Report

31% of users in monitored SMB environments are exposed to compromised passwords each month.

Confirmed business email compromise (BEC) losses range from $140,000 to $1.5 million, compared to an average of roughly $40,000 in early 2025.

Session hijacking incidents increased by 23% over a 180-day period.

89% of monitored SMBs have at least one user with confirmed credential compromise at any given time.

AI-driven detection achieves 92.4% accuracy compared to 67% accuracy for human analysts alone.

Remote monitoring and management (RMM) tool abuse accounted for 26% of all detections in monitored SMB environments.

Machine identities outnumber human users by 25:1 in Microsoft 365 environments.