Weak passwords accounted for 7% of the compromises investigated
Study: Trustwave Global Security Report 2016
Date: April 15 2016
Weak passwords were a factor that accounted for 7% of all security compromises that Trustwave investigated in 2015. Compared to 8% as a result of phishing / social engineering, and 13% due to insecure remote access software or policies.
When looking only at investigated corporate or internal network intrusions (which accounted for 40% of their total investigations) they saw weak passwords as a factor rise to 13%, with phishing / social engineering rising to 21%.