Case Studies
Uncovering and Stopping a Coordinated Identity-Based Attack at Enterprise Scale
Industry
Insurance
Company Size
45,000+ employees
Region
Global
The Challenge
Detect and stop a sophisticated, coordinated identity fraud campaign—without disrupting legitimate users or slowing critical business processes.
The Impact
Attackers exploited gaps in identity verification policies, using:
- Repeated registrations with mismatched phone numbers and emails
- High-velocity attempts from shared devices
- Synthetic identities and non-standard communication channels
Existing controls flagged risk signals but lacked the adaptive enforcement needed to stop the attack in real time.
The Benefits
Attackers exploited gaps in identity verification policies, using
-
Block 100% of fraudulent attempts within days
-
Impact <1% of legitimate users, maintaining ~99% pass rates
-
Rapid deployment of no-code policy updates
-
Establish real-time visibility into attacker behavior and tactics
-
Strengthen long-term identity fraud defenses and resilience