Cybersecurity threats have reached unprecedented levels and are expected to continue growing. AI enables incredible productivity for all IT users, including cybercriminals, and allows them to launch sophisticated attacks targeting virtually every person using IT. Yet, a dangerous disconnect exists between common user awareness and the implementation of cybersecurity measures. While 64% of global consumers cite data breaches as their primary privacy concern, the actual protection landscape reveals major gaps that put millions of users at risk.
Also Read: Three Steps to Take with Governance and Culture to Catalyse AI Success
Cybersecurity Gaps
According to the Acronis Data Privacy Survey 2025, 64% of global consumers cite data breaches as their top privacy concern. However, the report also reveals that 25% of respondents have already experienced some form of data theft or loss, with 12% unsure if they have been breached. This suggests that many such cyber incidents often go undetected. The reality is that many breaches occur without immediate consequences, leading users to believe they are safe when, in fact, their data may already be compromised.
This gap between concern and awareness highlights a crucial issue – many individuals may be compromised without realising it, potentially exposing their sensitive information to bad actors for extended periods. For example, major data leaks such as the Facebook data breach and LinkedIn credential leaks exposed millions of user accounts to hackers. The rising prevalence of dark web data marketplaces, where stolen credentials are bought and sold, further exacerbates this risk. Cybercriminals often exploit the personal information gained through these methods for identity theft, financial fraud, and even targeted phishing attacks. The lack of immediate repercussions in these cases allows the breaches to go unnoticed, causing long-term damage to unsuspecting victims.
Despite 66% of respondents claiming to regularly back up data, nearly 13% either do not back up or lack an understanding of the concept. This vulnerability is particularly concerning given that the number of ransomware attacks is growing over by 100% yearly, and there is no indication this may slow down. Without backups, individuals risk permanent data loss in the event of ransomware attacks, hardware failures, or accidental deletions. Regular data backups help protect valuable personal and business information, especially in secure, encrypted formats. Yet, too few consumers adopt reliable backup strategies, leaving their most important files vulnerable to permanent loss.
Password security shows similar discrepancies. While 68% claim to use strong passwords, only 46% have implemented two-factor authentication. Weak passwords and password reuse remain among cybercriminals’ easiest entry points, with over 80% of attacks involving a compromised password. A single weak password can give hackers access to multiple accounts if users recycle credentials. Despite widespread knowledge about password security, the reluctance to adopt additional authentication measures continues to leave users vulnerable.
Mobile security remains dangerously overlooked. Only 43% use security apps, and 35% are unaware such protections exist. This oversight is particularly troubling, considering that mobile devices account for approximately 60% of all digital banking transactions. Inadequate mobile protection significantly increases the likelihood of data breaches. Cybercriminals exploit this weakness through malware, fake apps, and SIM-swapping attacks that compromise personal data and banking details.
Also Read: Beyond the Mailroom: How CIOs Can Transform Enterprise Mail into a Secure Digital Hub
Causes for the Cybersecurity Gaps
These findings outline a persistent challenge faced by the cybersecurity sector: many people acknowledge the risks of leaving their data unprotected but fail to take adequate measures to protect themselves. Several factors contribute to this gap:
- Lack of Technical Knowledge: Many users do not fully understand how to implement cybersecurity measures, such as using dedicated password managers, setting up two-factor authentication (2FA), or recognizing phishing attempts. Cybersecurity can feel complex and intimidating, leading many consumers to avoid taking action.
- Convenience vs. Security: People often choose to prioritise convenience over security. Some examples include reusing passwords or ignoring software updates that could patch system vulnerabilities. Security best practices often require additional steps, and many consumers opt for ease of use rather than safeguarding their data.
- Perceived Invulnerability: Some individuals also assume they are unlikely targets for cybercriminals, underestimating the risks associated with poor data security habits. This “it won’t happen to me” mindset is dangerous, as hackers do not discriminate when choosing targets. Every digital user is at risk.
Bridging the Cybersecurity Gaps
As cyber threats evolve, consumers must adopt fundamental security practices:
- Implement unique passwords and enable 2FA for all accounts
- Run security software on their systems
- Maintain regular, encrypted data backups
- Utilize VPNs for sensitive transactions
- Limit personal information exposure online
- Stay vigilant against phishing attempts
Practicing basic cyber hygiene—like using strong, unique passwords, enabling two-factor authentication (2FA), and keeping software updated—can significantly lower the risk of cyber threats. Regularly monitoring financial and personal data, including checking bank statements and credit reports, can help detect potential breaches early. Taking proactive measures, such as freezing credit files after a data breach, can also help mitigate identity theft risks. Consumers should also avoid public Wi-Fi for sensitive transactions, invest in a VPN for extra protection, and ensure mobile devices are properly configured and secure. Additionally, limiting personal data shared on social media and staying vigilant against phishing attempts can further protect digital identities. Many high-profile breaches have been traced back to users accessing sensitive information over unsecured networks, making VPNs a necessary tool in today’s digital world.
The digital transformation of society has made cybersecurity a universal concern. Data breaches are a top concern globally, highlighting the urgent need for simpler and more accessible security measures paired with data backup strategies and stronger cybersecurity education to empower individuals in protecting their digital lives. By educating consumers on best practices and making security solutions more user-friendly, we can close the awareness-action gap and create a safer digital environment for all.
These findings remind us that cyber threats are no longer distant possibilities for anyone. Cybercriminals can scale their attacks using AI, reaching everyone. Thus, everyone should stay vigilant and deploy high-quality cybersecurity protection. The growing sophistication of cybercrime demands stronger security habits and proactive defense strategies. Protecting personal data is no longer optional—it is essential in today’s connected world.
