Study Publisher: Shape Security
Study Date: January 2017
Study URL: http://info.shapesecurity.com/rs/935-ZAM-778/images/Shape-2017-Credential-Spill-Report.pdf

Study Overview:
"Since our technology protects the online applications of the world’s largest corporations in financial services, retail, travel, and other industries, as well as some of the largest government agencies in the world, the Shape network is able to observe the use of stolen credentials globally. Analyzing more than one billion high value transactions per week -- primarily login requests -- to detect and protect against against credential stuffing and other attacks, Shape has been able to observe the automated use of stolen credentials by cybercriminals across the world."

Statistics From This Study:

• How successful are attacks that take advantage of password reuse by trying leaked credentials
• What types of online password guessing attacks are sites subjected to?