Cyberattack Battlefield Shifts: From Corporate Servers to Personal Devices, Info-Stealer Password Leaks Outpace Data Breaches by 18x

NordVPN, a leading personal security service provider, in collaboration with threat intelligence platform NordStellar, has released a comparative study on data breaches and 'info-stealers.' The study shows that while corporate database breaches decreased by 36% from 2024 to 2025, logs of info-stealer infections—malware that secretly collects credentials—increased by 35%. Password leaks via info-stealers are now over 18 times higher than those from data breaches, highlighting a shift in the cyberattack landscape. Attackers are prioritizing cost-effectiveness, finding it easier to steal credentials from personal devices than to breach corporate servers. Experts warn that these infections are often unnoticed, leading to account takeovers. Recommended defenses include disabling browser password saving, enabling multi-factor authentication (2FA), and avoiding downloads from unofficial sources.