SpyCloud researchers recovered more than 4.6 billion pieces of personally identifiable information and nearly 1.5 billion stolen account credentials from 854 breach sources in 2020. The number of breach sources increased 33% over 2019, with an average 2020 breach size of 5,455,813 records. For users with more than one password collected last year, researchers found that 60% of the credentials were reused across multiple accounts, making them ripe for account takeovers and password spraying attacks. Criminals use PII to create fake accounts or steal someone else’s identity and then apply for lines of credit, intercept tax refunds, drain bank accounts.
Source: https://www.helpnetsecurity.com/2021/03/05/credential-exposure-trends-2020/