Major retailers like Adidas and The North Face were breached using identity-driven tactics, exposing key security gaps.