As data breaches go unreported for longer periods, the window for credential stuffing and phishing attacks widens, eroding confidence in any platform that relies on user email/password logins. This trend reinforces the crypto narrative around self-custody and decentralized identity, but also increases regulatory pressure on exchanges to prove their security posture.

Not applicable

Troy Hunt reports that the disclosure lag for data breaches has worsened despite 1,000 breaches having been tracked.