Identity linked to two-thirds of security incidents