diff --git a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
index 04b05f04f..e586a3ec6 100644
--- a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
+++ b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
@@ -622,6 +622,9 @@ class ReportPageComponent extends AuthComponent {
 
   isStolenCredentialsIssue(issue) {
     return ( Object.prototype.hasOwnProperty.call(issue, 'credential_type') &&
+        (getCredentialsSecrets(this.state.stolenCredentials, 'password').includes(issue.password) ||
+            getCredentialsSecrets(this.state.configuredCredentials, 'nt_hash').includes(issue.password) ||
+                getCredentialsSecrets(this.state.configuredCredentials, 'lm_hash').includes(issue.password)) &&
         (issue.credential_type === 'PASSWORD' ||
             issue.credential_type === 'NT_HASH' ||
             issue.credential_type === 'LM_HASH'))