Online retail hackers account for 90% of all login attempts. According to a report by cybersecurity firm Shape Security, hackers use special software with stolen data to login multiple times, called credential stuffing.

These attacks are successful as often as 3% of the time, and the costs quickly add up for businesses, Shape says. This type of fraud costs the e-commerce sector about $6 billion a year, while the consumer banking industry loses out on about $1.7 billion annually. The hotel and airline businesses are also major targets—the theft of loyalty points is a thing—costing a combined $700 million every year.

A recent study in the Psychological Science journal asked 6,641 residents in the U.K. to describe in writing their first memory, and the age they were in that memory. Around 40% of people found out that that memory is probably false.

It might seem dismissive to assume that these memories are false, but memory researchers have good reason to conclude that people aren’t truly remembering being a baby. Research on infantile amnesia, the official term for the phenomenon in which we forget things that happened to us as babies and young children, has shown that it’s close to impossible to retain declarative memories at that young age.