Media Industry Full of Credential Stuffing Attacks: Akamai Twenty percent of credential stuffing attacks directed toward media companies according to "Akamai 2020 State of the Internet / Credential Stuffing in the Media Industry" Report
Cambridge, MA | July 15, 2020
The media industry suffered 17 billion credential stuffing attacks between January 2018 and December 2019 according to a new report from Akamai (NASDAQ: AKAM), the intelligent edge platform for securing and delivering digital experiences. Released today, the Akamai 2020 State of the Internet / Credential Stuffing in the Media Industry report found that 20% of the 88 billion total credential stuffing attacks observed during the reporting period targeted media companies.
Media companies present an attractive target for criminals according to the report, which reveals a 63% year-over-year increase in attacks against the video media sector. The report also shows 630% and 208% year-over-year increases in attacks against broadcast TV and video sites, respectively. At the same time, attacks targeting video services are up 98%, while those against video platforms dropped by 5%.
The marked uptick in attacks aimed at broadcast TV and video sites appear to coincide with an explosion of on-demand media content in 2019. In addition, two major video services launched last year with heavy support from consumer promotions. These types of sites and services are well aligned to the observed goals of the criminals who target them.
Much of the value in media industry accounts lies in the potential access to both compromised assets, like premium content, along with personal data according to Steve Ragan, Akamai security researcher and author of the State of the Internet / Security report. Weve observed a trend in which criminals are combining credentials from a media account with access to stolen rewards points from local restaurants and marketing the nefarious offering as date night packages, Ragan explained in the report. Once the criminals get a hold of the geographic location information in the compromised accounts, they can match them up to be sold as dinner and a movie.
Video sites are not the sole focus of credential stuffing attacks within the media industry, however. The report notes a staggering 7,000% increase in attacks targeting published content. Newspapers, books and magazines sit squarely within the sights of cybercriminals, indicating that media of all types appear to be fair game when it comes to these types of attacks.
The United States was by far the top source of credential stuffing attacks against media companies with 1.1 billion in 2019, an increase of 162% over 2018. France and Russia were a distant second and third with 393 million and 243 million attacks, respectively.
India was the most targeted country in 2019, enduring with 2.4 billion credential stuffing attacks. It was followed by the United States at 1.4 billion and the United Kingdom at 124 million.
As long as we have usernames and passwords, were going to have criminals trying to compromise them and exploit valuable information, Ragan explained. Password sharing and recycling are easily the two largest contributing factors in credential stuffing attacks. While educating consumers on good credential hygiene is critical to combating these attacks, it's up to businesses to deploy stronger authentication methods and identify the right mix of technology, policies and expertise that can help protect customers without adversely impacting the user experience.
Q1 2020 Update Publication of the Akamai 2020 State of the Internet / Credential Stuffing in the Media Industry report was delayed from April to July due to the COVID-19 pandemic. The extra time allowed Q1 2020 data to be added to the original report.
Most notably, there was a large spike in malicious login attempts against European video service providers and broadcasters during the first quarter of 2020. One attack in late March, after many isolation protocols had been instituted, directed nearly 350,000,000 attempts against a single service provider over a 24-hour period. Separately, one broadcaster well known across the region, was hit with a barrage of attacks over the course of the quarter with peaks that ranged in the billions.
Another noteworthy trend during the first quarter was the number of criminals sharing free access to newspaper accounts. Often offered as self-promotional vehicles, credential stuffing campaigns must still be initiated in order to steal the working username and password combinations that are given away.
Akamai researchers also observed a decline in the cost of stolen account credentials over the course of the quarter, which traded for approximately $1 to $5 at the start and $10 to $45 for package offers of multiple services. Those prices fell as new accounts and lists of recycled credentials populated the market.
The Akamai 2020 State of the Internet / Security Report is available here. For additional information, the security community can access, engage with, and learn from Akamais threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamais Threat Research Hub.
About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and v
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
04/08/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
04/07/2026
April 7 2026, 19:00 (PDT) Detective Conan: Fallen Angel of the Highway Opens in...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Bitmovin, a leading provider of video streaming infrastructure, and Akamai, the cybersecurity and cloud computing company that powers and protects business onli...
04/06/2026
American Underground (AU), the Startup Hub of the South and a community of mor...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/06/2026
NVIDIA and Microsoft Reinvent Windows PCs for the Age of Personal AI
Brie Clayton June 3, 2026
0 Comments
RTX Spark - a 1-Petaflop Superchip, the Full...
04/06/2026
Inside the Peaky Blinders: The Immortal Man Grade
Brie Clayton June 3, 2026
0 Comments
Simone Grattarola discusses shaping the look in DaVinci Resolve...
04/06/2026
Cine Gear Expo Announces 2026 Awards of Excellence Recipients
Brie Clayton June 3, 2026
0 Comments
Ed Lachman ASC, Caleb Deschanel ASC, and M. David M...
04/06/2026
St. Vincents Live with Orchestra Tour to Feature Berklee Alum Ruby Plume Berklee alumni St. Vincent and Ruby Plume will appear on the same bill across seven d...
04/06/2026
BackStory follows four Irish young people as they travel back to their parents' homelands
Modern Irish identity is enriched by cultures and influences from...
04/06/2026
June's forecast with GeForce NOW: 100% chance of gaming.
GeForce NOW is lining up new adventures for the month, from big-name blockbusters to quirky indies...
03/06/2026
SES and Viva, Mexico's ultra low-cost airline, have launched multi-orbit satellite inflight connectivity on Viva's Airbus aircraft. A total of 60 A320s ...
03/06/2026
The College Football Playoff, ESPN, and TNT Sports have announced kick times and...
03/06/2026
RED Digital Cinema will exhibit at Cine Gear Expo 2026 (Booth 33, June 5-6, Universal Studios Lot), hosting three panels and hands-on product demonstrations.
P...
03/06/2026
Roku has announced the Soccer Zone, a dedicated hub for FIFA World Cup 2026 content available across the United States, Canada, Mexico, Brazil, Colombia, Argent...
03/06/2026
Liverpool FC and Wasabi Technologies have announced a multi-year extension of their partnership, with Wasabi continuing as the club's official cloud storage...
03/06/2026
Grass Valley has announced that Australian News Channel (ANC), operator of Sky News Australia, has deployed Grass Valley AMPP as part of the relocation of its n...
03/06/2026
The Riedel Group has announced the appointment of Gudrun Scharler as CEO of Riedel Networks. She succeeds Michael Martens, who has led Riedel Networks since 201...
03/06/2026
Clear-Com has announced the deployment of its intercom solutions at Itaka Arena ...
03/06/2026
Scott Coker has announced six senior executive appointments for his new global MMA promotion, which launched earlier this year with $60 million in financing. Ad...
03/06/2026
Telemundo, the exclusive Spanish-language home of the FIFA World Cup 2026, has announced its digital and social media programming for the tournament, running Ju...
03/06/2026
The Bundesliga has announced the launch of Captain, an AI assistant built into t...
03/06/2026
Anthony James Partners (AJP) is serving as technology consultant for a moderniza...
03/06/2026
Audio-Technica has announced the recipients of its annual sales rep firm awards for the 2025-26 fiscal year. The awards were presented by Jim Schanz, Executive ...
03/06/2026
iodyne will exhibit at Cine Gear Expo 2026 alongside RED Digital Cinema and Adob...
03/06/2026
The broadcaster will deploy 39 cameras for game coverage, six cameras for studio...
03/06/2026
The 2026 FIFA World Cup is providing a great opportunity for not only Fox Sports...
03/06/2026
Sony Electronics is introducing the SRG-AS10, a 4K 60p compatible PTZ Auto Framing camera that uses Sony's proprietary AI to automatically recognize and tra...
03/06/2026
Game Creek Video's Flagship A, B, C, and D unit will wind up its first year ...
03/06/2026
According to Caretta Research, the sports-rights market may be hitting the brake...
03/06/2026
Retrieval still courtesy of Tribeca.
By Jessica Herndon
This year, the Tribeca...
03/06/2026
Step sequencer-style panning tool revealed
Alongside their flagship self-titled sound-design platform, Sound Particles offer an array of creative effects an...
03/06/2026
Now features full H90 algorithm library
Eventide have announced the upcoming launch of the H9 Harmonizer Gen 2, a new and improved version of their hugely p...
03/06/2026
Significant discount available until 1 October 2026
Aim Audio have just announced a promotion that sees a significant discount applied to their Essence micr...
03/06/2026
Clarification: SBS's position on definitions of antisemitism
3 June, 2026
Media releases
Statement by Mandi Wicks, SBS Director of News and Current Aff...
03/06/2026
Rohde & Schwarz to supply CERTIUM advanced communications system to Memmingen Ai...
03/06/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({...
03/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
03/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
03/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
Media Industry Full of Credential Stuffing Attacks: Akamai Twenty percent of credential stuffing attacks directed toward media companies according to "Akamai 2020 State of the Internet / Credential Stuffing in the Media Industry" Report 
