About 81% of mass breaches are caused by stolen or weak passwords, and just over half of data breaches involve some form of credential harvesting.