Administrator compromise to full tenant takeover57%
Phishing to account takeover and invoice fraud46%
MFA bypassed by session-token theft48%
Personal or commercial data exposed37%
Ransomware through a vulnerable or unprotected device26%
Your domain used to defraud customers and suppliers10%