The Russian data leak intelligence service DLBI analyzed user behavior following security breach notifications. The study examined over 1,000 sets of credentials compromised in 2026. Researchers tracked whether users updated their passwords after receiving alerts and recommendations to change them, filtering out data compilations commonly found on the black market.
The findings indicate that approximately 70% of users followed the security recommendations and updated their passwords. However, about 30% of individuals ignored the alerts and continued using compromised credentials. Among those who did not act, roughly 15% of the total sample were found to be using the same compromised password across multiple different services.
DLBI founder Ashot Oganesyan noted that users often ignore security advice due to information overload regarding cyber threats. While large corporations mitigate this risk through automated password resets that prevent the reuse of compromised combinations, small businesses and personal accounts remain vulnerable. Oganesyan suggests integrating cloud services with credential monitoring systems to automate security enforcement.
The report highlights a growing trend where users delay security actions until they suffer actual financial or data loss. While corporate environments benefit from enforced security policies, personal and small business accounts rely on manual updates, which are frequently forgotten. Implementing automated protection mechanisms is proposed as a necessary step to bridge this security gap.
