13% of employees view selling login credentials as harmless

Published: 06/05/2026
| Infosecurity Magazine

new report by fraud prevention service Cifas has revealed that 13% of employees at large UK companies have either sold their corporate login credentials in the past year or know someone who has. The study, involving 2,000 staff at organisations with over 1,000 employees, found a concerning tolerance for fraudulent workplace behaviour across all levels of seniority.

The findings indicate that 13% of respondents consider selling credentials harmless. The sentiment is notably higher among leadership, rising to 32% among senior managers, 36% among directors, 43% among C-suite executives, and 81% among business owners. Professionals in the IT and telecoms sectors displayed the highest tolerance for fraud-related scenarios, which included faking references, secret freelancing for competitors, and gambling company funds.

Cifas warned that such insider threats expose organisations to significant cyber and financial crime. The report emphasises the need for businesses to develop fraud-aware cultures and provide comprehensive training. 


Training Announcement: Freevacy offers a range of short one-day courses on a range of data-related subjects, including data protection topics such as conducting DPIAs and privacy-by-design, as well as how to use AI tools responsibly, cybersecurity best practices, and information access. The interactive sessions cover basic concepts through to advanced examinations of specific areas. Find out more.

Read Full Story Insider Threat

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 3,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.