Report by Rubrik Zero Labs
Identity Crisis: Understanding & Building Resilience Against Identity-Driven Threats
Key Findings
58% of organizations cited security concerns as the primary driver for switching IAM providers
58% of IT security decision makers estimate that 50% or more of cyberattacks in the next year will be driven by agentic AI
90% of global leaders identified identity attacks as their top concern in 2025
89% of organizations that experienced a ransomware attack in the past year paid a ransom to recover their data or stop the attack
58% of IT and security leaders believe it would take at least two days to recover and achieve full-service operations post-compromise
89% of organizations have fully or partially incorporated AI agents into their identity infrastructure, with an additional 10% planning to do so
In 2025, only 28% of IT and security leaders believed they could fully recover from a cyber incident in 12 hours or less, down from 43% in 2024
87% of IT and security leaders plan to change Identity and Access Management (IAM) providers or have already begun the process
89% of organizations plan to hire professionals within the next 12 months to manage or improve identity management, infrastructure, and security
82% is the ratio of non-human identities (NHIs) to human users, indicating NHIs now outnumber human users by 82 to 1