8. On average, 20% to 50% of all IT help desk tickets each year are for password resets.
9. An estimated 60% of passwords that appeared in more than one breach in 2020 were recycled or reused.
10. Almost 25% of breaches were the result of credential stuffing in 2020.
    • According to Wikipedia, Credential stuffing is a type of cyberattack in which stolen account credentials, typically consisting of lists of usernames and/or email addresses and the corresponding passwords, are used to gain unauthorized access to user accounts through large-scale automated login requests directed against a web application.

https://www.idagent.com/blog/10-more-facts-about-passwords-that-youll-want-to-see/