Study Publisher: NetSPI
Study Date: January 19 2016
Study URL: https://blog.netspi.com/netspis-top-password-masks-for-2015/

Study Overview:
"During many of our internal penetration tests, we grab the password hashes for all of the domain users and attempt to crack them. I’ve compiled a list of our top password masks for the year [2015]. This is a uniqued list. It does not account for duplicates [passwords]..."

No specific details were provided on the overall number of passwords cracked. However the author says "we captured more than double the number of hashes this year compared to 2014." Their 2014 data (https://blog.netspi.com/netspis-top-cracked-passwords-for-2014/) says they collected about 91,000 hashes.

Statistics From This Study:

• Common character masks of cracked corporate passwords