If criminals can buy your employees’ stolen credentials for a few dollars, they can buy their way into your business, deploy ransomware, and turn it into a major financial event.