AI-Driven Data Breaches Surpass Stolen Credentials, Verizon Report Finds

Verizon’s annual data breach report highlights a significant shift in the cybersecurity landscape. For the first time, breaches initiated through software vulnerabilities have surpassed those stemming from stolen credentials. The report, which analyzed over 31,000 incidents, reveals that 31% of all breaches began with vulnerability exploitation. This trend underscores the growing influence of artificial intelligence (AI) in cyber attacks.

AI's Role in Cybersecurity Threats

Hackers are increasingly employing AI to identify and exploit software vulnerabilities, significantly reducing the time targets have to respond to threats. According to Verizon, generative AI is being used at all stages of attacks, from initial access to malware development. The report states that AI is "fundamentally reshaping the cybersecurity industry," accelerating the exploitation of known vulnerabilities from months to mere hours.

The use of Shadow AI-non-authorized AI tools-is also on the rise. It has become the third most common non-malicious insider action in data loss incidents, with employees submitting source code and other structured data through unauthorized channels. This development adds another layer of complexity to internal security protocols.

CrowdStrike’s annual global threat report further corroborates this trend. In 2025, AI-enabled adversaries increased attacks by 89% year-over-year, elevating less sophisticated actors and amplifying the capabilities of advanced ones. The convergence of AI and cyber threats is creating a formidable challenge for organizations worldwide.

Key Figures

• 31,000 Incidents Analyzed: Verizon’s report reviewed a comprehensive dataset to identify trends in data breaches.
• 31% of Breaches: Initiated through vulnerability exploitation, surpassing stolen credentials for the first time.
• 89% Increase: AI-enabled adversaries increased attacks year-over-year in 2025, according to CrowdStrike.

The implications of these findings are profound. Companies must adapt their cybersecurity strategies to address the growing threat of AI-driven attacks. This includes enhancing vulnerability management, improving employee education on the risks of Shadow AI, and investing in advanced detection and response technologies.

As the landscape continues to evolve, staying ahead of emerging threats will be crucial for maintaining data integrity and protecting against potential breaches.