Next’s Specops Breached Password Report 2026 has highlighted how beyond 6 billion credentials compromised In 2025, they confirm the critical nature of widespread practices such as password reuse and predictable user behaviour, which continue to expose individuals and organisations to digital identity-based attacks.
According to the Privacy Guaranteeindustry studies show how stolen credentials are used for fraudulent access to digital services, particularly Entertainment platforms (35,6%), social media (21.9%) ed e-commerce (21,2%).
In December 2023, the Authority, together with theNational Cybersecurity Agency (ACN) has defined guidelines to strengthen password management protection, confirming how security increasingly relies on the safeguarding of digital identity.
But the paradigm shift is already underway: MFA, passwordless, and Zero Trust models are no longer options, but fundamental requirements.
