Among organisations with over 10,000 employees, 20% have an annual direct and indirect identity fraud cost of over $50 million.