Younger generations care little about cybersecurity
SailPoint released a survey which aimed to identify gaps within organizations’ cybersecurity postures by analyzing workforce behaviors that blur work and personal lives, leading to security pitfalls.
According to the findings, 59% of all workers are using corporate email for personal use, but Gen Z is the biggest offender (93%). With these numbers growing as the lines between work and home increasingly blur amid the ongoing COVID-19 pandemic, SailPoint set out to determine how users’ behaviors when conducting these activities could put a target on any organization’s back for a cyberattack or data breach.
Examining workers’ awareness levels when it comes to identifying and acknowledging a phishing attack, the survey found 44% noticed that the number of phishing messages they’ve received are up year-over-year.
However, there are glaring generational differences when it comes to their behaviors that are putting Baby Boomers, Gen X, Millennials and Gen Z – and their employers – at risk.
Social media is fueling malicious attacks – especially against Gen Z
In this day and age, an email is required to create any kind of online account – including social media profiles. While these sites are traditionally meant for personal use, the survey found that Gen Z (77%) and Millennials (55%) are using corporate emails for their social media logins, compared to just 15% of Gen X and 7% of Boomers.
Considering the frequency and reach of social media hacks today (e.g. more than half a billion Facebook accounts were stolen just this April), risk is on the rise with new potential doorways being opened every day.
The holidays signal greater corporate threats from younger generations
Ahead of the holiday season, nearly one in three workers (29%) say they use their corporate email for online shopping (Boomers are the least likely to engage in these activities, with only 3%). More urgently, 39% have received a phishing message impersonating retailers and 22% have received a message impersonating marketing emails.
On the heels of one of the busiest online shopping seasons ever (Mastercard reported a 47.2% gain in e-commerce during the 2020 holidays), consumers can expect increased phishing attacks and retail breaches in the coming months.
Boomers are more well-equipped to deal with a phishing email
Despite being confident in their ability to detect a phishing message – 94% are confident or very confident in their ability to detect a phishing message – only 29% know how to appropriately react to a phishing email (forwarding it to IT).
When pressed on how they would respond to a suspicious looking email with a link or attachment, 46% of Gen Z respondents said they would open the link or attachment, compared to just 1% of Boomers (29% of Millennials and 4% of Gen X would also open the link or attachment).
“Over the last year and a half, we’ve seen countless, high-profile cyberattacks, stemming from email activity, that have brought organizations – like retailers, currency exchanges and healthcare organizations – down to their knees,” said Heather Gantt-Evans, CISO at SailPoint.
“By using corporate email for personal use, employees are inadvertently expanding the threshold for malicious actors to enter into a corporate network, completely unnoticed. As demonstrated by the data, most don’t know what to do if they see suspicious activity, but with proper education and training, we can deter these types of events to ensure business remains operating as usual.”