The CrowdStrike 2025 Global Threat Report highlights the ongoing threat of identity-based attacks. Adversaries are increasingly exploiting stolen credentials to evade detection, and 79% of detections overall were classified as malware-free. Valid account abuse became the primary initial access method in 35% of cloud intrusions.
The report also shares that access broker advertisements rose by 50% year-over-year, indicating a rise in demand for valid credentials and other forms of access. With the average eCrime breakout time dropping to just 48 minutes, organizations are under constant pressure to detect and stop identity-based threats before they escalate.
Organizations require identity protection that will provide full visibility into threats targeting their environments. That’s why industry leaders like Texas Mutual, BLG, and Florida State University rely on CrowdStrike Falcon® Identity Protection to stop breaches by securing credentials, detecting compromised accounts in real time, and automating responses to identity threats.
Below is a summary of each customer story. CrowdStrike’s full collection of case studies and customer videos are available at crowdstrike.com.
Texas Mutual Secures Sensitive Accounts
The AI-native CrowdStrike Falcon® cybersecurity platform plays a vital role in addressing identity protection challenges for Texas Mutual, the state’s leading provider of workers’ compensation insurance. The insurer uses the combination of Falcon Identity Protection and CrowdStrike Falcon® Adversary Intelligence to thwart attacks.
Together, these solutions provide robust defense against credential-based threats. The Recon feature of Falcon Adversary Intelligence monitors the dark web for compromised credentials, while Falcon Identity Protection enables quick remediation by resetting affected passwords and securing vulnerable accounts.
“There are lots of inactive accounts that people only use occasionally, like once a year, to pay a policy,” explained Texas Mutual Senior Solution Architect Rick Robles.
What’s particularly concerning to Robles is that some of these accounts belong to high-visibility individuals, such as board members, which make them prime targets for attackers. With CrowdStrike’s advanced identity protection and threat hunting capabilities, Texas Mutual can secure these accounts to maintain the integrity of its operations.
Managed Identity Protection at BLG
BLG, Canada’s largest law firm, uses Falcon Identity Protection to proactively address identity-based threats and improve its security posture. The solution, managed by CrowdStrike Falcon® Complete Next-Gen MDR, employs risk-based policies to automatically block, allow, audit or escalate authentication for every identity, while a team of experts provides 24/7 managed protection against identity-based threats — giving BLG peace of mind.
CrowdStrike’s AI-powered risk scoring system Exprt.AI enables the quick detection and mitigation of identity-related risks, such as compromised passwords used across external sites. Alerts from Falcon Identity Protection help enforce password updates, secure privileged accounts, and address stale accounts that have remained inactive for years.
BLG Director for Cybersecurity and Infrastructure Operations Wayne Cross said that deploying Falcon Identity Protection with Falcon Complete Next-Gen MDR has been transformational because it frees up resources for BLG security staff to address strategic initiatives and fortify cybersecurity in other areas.
“By moving to Falcon Complete, we saw a drop in our operational expense on cybersecurity by 40%. We were able to use a portion of that to reinvest in cybersecurity controls that could enable our legal professionals to work more efficiently. So it’s a win-win for the firm. They reduce costs, we increase our operational efficiency, and of course, improve the overall cybersecurity posture for the firm,” said Cross.
Identity Security in Higher Education
Higher education faces a unique set of cybersecurity challenges — and nobody’s more aware of them than FSU Chief Information Security Officer Bill Hunkapiller.
“Higher education is a huge target,” he explained. “Threat actors target environments like ours to steal sensitive data, encrypt systems and even launch triple-extortion attacks.”
Falcon Identity Protection plays a crucial role in strengthening FSU’s security posture. By monitoring identities and detecting risks like compromised passwords or clear-text credentials, the Falcon platform module helps FSU prevent privilege escalation attacks and lateral movement within the network.
“When we deployed Falcon Identity Protection, it uncovered risks we didn’t know we had,” Hunkapiller said. “For example, it identified accounts with compromised passwords … a common vulnerability we were able to address immediately.”
For Hunkapiller, these advanced capabilities not only outperform the university’s previous identity security strategy, but they allow for cybersecurity consolidation. “The integration of CrowdStrike endpoint and identity security streamlines everything and helps us focus on real threats. It’s made us much more efficient.”
Unified Security with Proven Results
Traditional identity security solutions often operate in silos, creating gaps that adversaries exploit. CrowdStrike customers consistently report that stitching together separate identity and endpoint security tools slows response times, increases operational complexity, and leaves organizations vulnerable to credential-based attacks. A unified approach is critical.
The Falcon platform consolidates identity and endpoint security into a single, AI-powered solution, delivering real-time detection and response without adding complexity. Falcon Identity Protection provides continuous monitoring across hybrid on-premises and cloud identity stores, stopping adversaries no matter where they strike. By eliminating blind spots and automating identity threat detection, organizations gain comprehensive security with minimal overhead.
The results speak for themselves. According to a 2025 Forrester TEI study, organizations using Falcon Identity Protection received $1.26M in total benefits over three years. Additionally, security teams are able to respond to identity-based attacks up to 85% faster and reduce investigation times by 5,000 hours annually.
Texas Mutual, BLG, and Florida State University have demonstrated how an integrated approach to identity security stops breaches before they happen. As identity threats escalate and adversaries refine their tradecraft, security teams must shift from reactive defenses to proactive identity protection — or risk falling behind.
Additional Resources
