- Flashpoint found ~34 insider threat posts daily on dark web between July 2025–26
- July 2026 saw 12,653 posts, with 75% from insiders selling access themselves
- Report warns insiders are now the weakest link, urging external monitoring of illicit forums
Every month, hundreds of people try to sell access to their employer’s IT infrastructure on the dark web. Some do it for the money. Others do it because they’re angry with their company for whatever reason.