{
  "slug": "identity-failure-map",
  "title": "The Identity Failure Map: fourteen ways the internet cannot tell who acted",
  "summary": "Fourteen structural identity failures behind the biggest losses of 2024 to 2026, with stable IDs, canonical incidents, and the missing primitive each one names.",
  "lede": "Every large loss of the last three years has been filed under a different label by a different department, and the labels describe the attacker's technique or the victim's cost centre. None of them names the thing that was actually missing. This is an attempt to name all fourteen.",
  "date": "2026-09-03",
  "reading_time": "19 min read",
  "category": "Research",
  "tags": [
    "identity failure taxonomy",
    "identity threat model",
    "MITRE ATT&CK",
    "identity architecture",
    "incident classification",
    "security taxonomy"
  ],
  "image": "https://cdn.twc.sh/images/igcache/Identity%20Failure%20Map/1200_630/blog.jpg",
  "url": "/blog/identity-failure-map.html",
  "wordcount": 4815,
  "related": [
    "approval-theater",
    "seven-layers-of-trust",
    "five-hardest-ciso-questions"
  ],
  "schema": "Article"
}