Credential Spill Report

Shape delves into where spilled credentials come from, how criminals weaponize and resell the data, and ways compromised accounts are turned into profits for the criminal underground. The report also drills down into the costs of credential stuffing attacks on companies in various industries that are commonly targeted by attackers.

Register and Read Report

Key Findings

2.3 Billion

Stolen Credentials

Over 2.3 Billion usernames and passwords were reported spilled from 51 organizations in 2017.

$50 Million

Potential Losses Per Day

The US consumer banking industry faces nearly $50 million per day in potential losses from credential stuffing attacks.

15 Months

to Discover Spills

On average, it took fifteen months for a credential spill to become public knowledge.

"On average, it takes 15 months from the day credential data is stolen to the day an intrusion is revealed."