Obit security experts report a 51% increase in the use of corporate credentials on third-party websites over the past year. Monitoring of shadow channels revealed compromised databases containing corporate email addresses and passwords used on AI services, online stores, forums, and gaming platforms.
Kirill Timofeev, head of the IT department at Obit, emphasizes that a corporate account serves as a gateway to the entire company ecosystem. Using work emails for non-work-related registrations or reusing passwords similar to those for internal systems creates significant vulnerabilities for corporate data security.
The company advises employees to audit and remove external accounts linked to corporate credentials. Obit recommends avoiding the use of work emails for new registrations on third-party sites and reporting any suspected data leaks to internal IT or security departments immediately.
To mitigate risks associated with human error, Obit has developed basic cybersecurity hygiene rules. These guidelines cover password management, the proper use of corporate devices and email, and secure network practices to help employees identify phishing attempts and respond to potential cyberattacks.
