98% of fraudulent hires have company credentials by the time they’re caught
HYPR report finds 98% of fraudulent hires already hold company credentials when detected, exposing an unowned identity-risk gap between hiring and onboarding.
HYPR's State of HR Identity Fraud Detection report says 98% of HR leaders have experienced candidate fraud and that fraudulent hires typically receive corporate credentials and network access before being identified. Third-party security tools detect only 53% of identity-based and AI-driven attacks, and ownership of pre-hire identity risk is undefined during the hiring-to-onboarding transition. Most companies need one to three weeks to resolve a hiring fraud incident, and roughly 60% of identity verification and MFA spending is triggered by a breach rather than proactive investment.
- 98% of fraudulent hires obtained company credentials before detection, per HYPR survey
- Disconnected checks average 2.2 detection points per fraud incident with no primary barrier
- Identity and AI-driven attacks evade third-party tooling in roughly 47% of cases
- Education showed the largest gap between fraud concern and confidence in defenses
- ATT&CK
- T1656 Impersonation
- Vendors
- HYPR
From the original article
3 min read at helpnetsecurity.com
A 90-day period between hiring and onboarding is creating a blind spot in enterprise identity security, according to HYPR’s State of HR Identity Fraud Detection report. “Adversaries no longer need to breach a network when they can pass a remote interview and receive authentic credentials directly from IT,” said Bojan Simic, CEO of HYPR. “Human intuition is not a security control.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.