Sophos Says Identity Threats Are a Leading Driver of Ransomware as AI Adoption Complicates Management

Employee identities, service accounts and cloud access credentials have become prime targets for hackers seeking to breach corporate defenses. In its 2026 State of Identity Security Report, cybersecurity firm Sophos said the rapid adoption of AI and cloud services is driving a sharp increase in digital identities, making it difficult for companies to maintain full visibility over permissions and suspicious activity. Identity security has therefore become central to ransomware prevention.

Sophos' latest survey found that two-thirds of respondents whose organizations had suffered ransomware attacks believed the incidents originated with identity-based attacks. The findings indicate that stolen credentials, privilege abuse and inadequate account controls have become major entry points. The report, released in 2026, warned that the continued growth of non-human identities and cross-cloud accounts following corporate adoption of AI tools is placing greater strain on existing monitoring and access-governance systems.