Cybersecurity Breach: Average Breakout Time Reduced to 29 Minutes

First seen 25 Feb 2026, 22:11 UTC • Cisoseries

•35.5

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

According to CrowdStrike's annual global threat report, the average breakout time from initial network intrusion to other systems has decreased to 29 minutes in 2025, significantly faster than previous years. The report indicates that 82% of these incidents did not involve malware, instead relying on legitimate credentials or social engineering tactics.

How this analysis works

Timeline

2025-01-01

CrowdStrike's annual global threat report released

2025-01-10

Average breakout time reported at 29 minutes

2025-01-10

82% of incidents involved legitimate credentials or social engineering

Recent

Fastest breakout time recorded at 27 seconds

Attack Flow

11 entities, 22 inferred relationships (STIX 2.1).

Threat Actor (3)

Andariel
Stonefly
Medusa

Technique (6)

Data Breach
Phishing
Ransomware
T1078 - Valid Accounts
T1566 - Phishing
T1567.002 - Exfiltration to Cloud Storage

Organization (2)

CarGurus
Step Finance

Relationships

Andariel uses Data Breach
Andariel uses Phishing
Andariel uses Ransomware
Andariel uses T1078 - Valid Accounts
Andariel uses T1566 - Phishing
Stonefly uses Data Breach
Stonefly uses Phishing
Stonefly uses Ransomware
Stonefly uses T1078 - Valid Accounts
Stonefly uses T1566 - Phishing
Medusa uses Data Breach
Medusa uses Phishing
Medusa uses Ransomware
Medusa uses T1078 - Valid Accounts
Medusa uses T1566 - Phishing
Andariel targets CarGurus
Andariel targets Step Finance
Stonefly targets CarGurus
Stonefly targets Step Finance
Medusa targets CarGurus
Medusa targets Step Finance
Andariel related to T1567.002 - Exfiltration to Cloud Storage

Continue Reading

Storm-1175 Deploys New StormEncryptor Ransomware Targeting N-central Systems Fire Ant Threat Actor Targets Trusted Infrastructure in 2026 Coordinated Cyberattack Disrupts Water Utilities in Minnesota Perseus Android Malware Targets User Notes for Sensitive Data Theft Chronus Group Breach Exposes 36 Million Mexican Citizens' Data The Gentlemen Ransomware Group Expands Operations with New Tools

Cybersecurity Breach: Average Breakout Time Reduced to 29 Minutes

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading