2017
Norton Cyber Security Insights Report
Global ResultsTable of Contents
1.

Key Findings

3–9

2.

Cybercrime by the Numbers

10 – 16

3.

Portrait of a Cybercrime Victim

17 – 20

4.

Consumers’ Contradicting Beliefs

21 – 24

5.

State of Consumers’ Trust

25 – 26

6.

About the 2017 Norton Cyber Security Insights Report

27 – 30

2
Copyright © 2018 Symantec Corporation

Key Findings

3
Copyright © 2018 Symantec Corporation

Key Findings
When it comes to cyber security, consumers are overconfident in their security prowess, leaving themvulnerable and enabling cybercriminals to up the ante this year, which has resulted in record attacks.
•
•
•

•

978 million people in 20 countries were affected by cybercrime in 2017.
44% of consumers were impacted by cybercrime in the last 12 months.
The most common cybercrimes experienced by consumers or someone they know include:o Having a device infected by a virus or other security threat (53%)
o Experiencing debit or credit card fraud (38%)
o Having an account password compromised (34%)
o Encountering unauthorized access to or hacking of an email or social media account (34%)
o Making a purchase online that turned out to be a scam (33%)
o Clicking on a fraudulent email or providing sensitive (personal/financial) information in response to a fraudulent
email (32%)
As a result, consumers who were a victims of cybercrime globally lost $172 billion – an average of $142 per victim –and nearly 24 hours globally (or almost three full work days) dealing with the aftermath.

4
Copyright © 2018 Symantec Corporation

Key Findings
Cyber security concerns do not always seem to translate to good behaviors as many consumers put
themselves at risk in their day-to-day lives. This leads us to a startling cybercrime confession: those who
emphasize the importance of online security, generally contradict themselves through their actions, and as aresult, are more likely to fall victim to cybercrime.
Cybercrime victims share three common traits:• Overconfident in Cybersecurity Prowess: Consumers who’ve fallen victim to cybercrime, emphasize the importanceof online security more than non-victims, yet they’re more likely to contradict their efforts through simple missteps.
While 44% of consumers have personally experienced cybercrime, 39% of cybercrime victims globally report gaining
trust in their ability to hold and protect their personal information and data and 33% believe they're at a low risk of
becoming a cybercrime victim.
• Favor Multiple Devices: Consumers who adopt the newest technologies and own the most devices are also more likely
to be victims of cybercrime. More than one third (37%) own a gaming console and smart device, compared to 28% of
non-victims. They’re also almost twice as likely to own a connected home device than non-victims.
• Dismiss the Basics: They practice new security techniques such as fingerprint ID (44%), facial recognition (13%),
pattern matching (22%), personal VPN (16%), voice ID (10%) and two-factor authentication (13%). Yet, 20% of
cybercrime victims globally use the same password across all online accounts and 58% shared at least one device or
account password with others. By comparison, only 17% of non-cybercrime victims use the same password across all
online accounts and 37% share their passwords with others.
5
Copyright © 2018 Symantec Corporation

Key Findings
From Millennials to Baby Boomers, to the parents in between, everyone leaves their virtual door open
when it comes to security.
•••

Confession: Millennials are the most technologically savvy – owning the most devices (four devices on average) andadopting advanced security practices (32%) such as pattern matching, face recognition, VPN, voice ID and two-factor
authentication, yet they make simple security mistakes such as bad password management (70%) and become acybercrime victim, with 60% globally experiencing a cybercrime in the last year alone. :o One in four (26%) of Millennials use the same password for all accounts, compared to 10% of Baby Boomers.
o 63% of Millennials globally have shared at least one or more of their passwords with another person, compared
to 36% of Baby Boomers.
Confession: Baby Boomers and Seniors are generally the safest age groups, though they make faux pas as well:o 61% of Baby Boomers and two-thirds of Seniors globally use different passwords, but 39% of Baby Boomers and
49% of Seniors write those passwords down on a piece of paper.
o Globally. Seniors are least likely to back up their devices, with 16% failing to back up any devices.
o Notably, Baby Boomers globally lost an average of $167 – the highest of all age groups and 15 percent higher
than the global average.
Confession: Parents are worried about many things when it comes to their child and the Internet – but few act. 96% ofparents globally worry about their children and the Internet, yet only a third of parents always supervise their children
online when they are playing online games, using social media or surfing the internet. Meanwhile, 11% of parents
globally do not take any actions to protect their children online.
6

Copyright © 2018 Symantec Corporation

Key Findings
Consumers’ boundaries skewed between cybercrime and “real life”••

Confession: While 81% of consumers globally think a cybercrime should be treated as a criminal act, 43% believe it’s
acceptable to commit morally questionable online behaviors in certain instances:o One fourth (26%) of consumers globally say reading someone’s emails without their consent is sometimes
acceptableo 21% of consumers globally believe using a false email or someone else's email to identify their self online issometimes acceptableo 15% of consumers globally believe that accessing someone's financial accounts without their permission issometimes acceptable
Interestingly, 53 percent of cybercrime victims globally were more likely to think it was acceptable to commit morally
questionable online behavior than non-victims (32%):
o 31% of cybercrime victims globally say reading someone’s emails without their consent is sometimes acceptablecompared to 18% of non-victims
o 25% of cybercrime victims globally believe falsely identifying themselves is sometimes acceptable compared to
14% of non-victims
o 18% of cybercrime victims globally believe that accessing someone's financial accounts without their permission
is sometimes acceptable compared to 10% of non-victims

7
Copyright © 2018 Symantec Corporation

Key Findings
Despite this year’s cyberattacks, consumers continue to trust the institutions that manage their data and personal
information; though, they have lost trust in their government.
••

Consumers globally have gained or maintained the same level of trust in the following institutions that manage theirdata and personal information:
o 76% in identity theft protection services
o 80% in internet service providers
o 80% in email providers
o 82% in financial institutions
Concerningly, however, 41% of consumers globally lost trust in their government to manage their data and personal
information.

8
Copyright © 2018 Symantec Corporation

What to Do?
Stick to the basics. The realities of cybercrime can feel daunting, but practicing basic behaviors, such as proper
password hygiene will go a long way. While new technologies such as facial recognition and voice ID are effective, it
all starts with basic security measures such as:
•

•

•

•

•

Craft the perfect password: Don’t tie your password to publicly available information as it makes it easier for the bad guys to guess
your password. Be sure to use a phrase that consists of a string of words that are easy to memorize but hard for anyone else to crack.
The longer your password, the better it is. Additionally, if your account or device enables it, consider two-factor authentication for an
additional layer of security. That way, if your password is compromised, it’s harder for the hacker to access your account. Finally, once
you’ve created a strong password, stick with it until you’re notified of a security breach. If you still feel overwhelmed, use a password
manager to help!
Know the ins and out of public Wi-Fi networks: Accessing personal information on unprotected public Wi-Fi is like broadcasting yourentire screen on TV – everything you do on a website or through an app, could potentially be exposed. Avoid anything that involves
sharing your personal information (paying a bill online, logging in to social media accounts, paying for anything with a credit card, etc.).
If you must access the information over public Wi-Fi, consider using a Virtual Private Network (VPN) to secure your connection and help
keep your information private.
Don’t keep a (dis)connected home: When installing a new network-connected device, such as a router or smart thermostat, remember
to change the default password. If you don’t plan on using the Internet feature(s), such as with smart appliances, disable or protect
remote access when not needed. Also, protect your wireless connections with strong Wi-Fi encryption so no one can easily view the data
traveling between your devices.
Don’t go on a phishing expedition: Think twice before opening unsolicited messages or attachments, particularly from people you don’tknow, or clicking on random links. The message may be from a cybercriminal who has compromised your friend or family member’s
email or social media accounts.
Be in control when online: Protect all your devices with a robust, multi-platform security software solution to help protect against thelatest threats.

Copyright © 2018 Symantec Corporation

9

Cybercrime by the Numbers

10
Copyright © 2018 Symantec Corporation

Within the last year, more than 978 million adults in 20 countries
globally experienced cybercrime

Adult population of 20 countries - 3.1 billion
Online population (57%) - 1.8 billion

Experienced Cybercrime – 978 million

Millions unless noted:
Australia

2017

6.09

Brazil

62.21

Canada

10.14

China

352.70France19.31

Germany

Hong Kong

23.36

2.41

India

186.44

Indonesia

59.45

Italy

16.44

Japan

17.74

Mexico

33.15

Netherlands

New
ZealandSingapore

3.43

1.14

1.26

Spain

16.20

Sweden

2.09

UAE

3.72

UK

USA

17.40

143.7011
Copyright © 2018 Symantec Corporation

53% of consumers experienced cybercrime or know someone who
has
Had a device computer/tablet/phone infected by a virus or other security threat

26%

36%

Had an account password compromised

18%

19%

Experienced credit or debit card fraud

17%

23%

Been notified that your personal information was involved in a data breach

16%

17%

Unauthorized access to or hacking of your email or social network profile

16%

21%

34%

Made a purchase online that turned out to be a scam

14%

20%

33%

Had others use your home Wi-Fi without permission

14%

16%

28%

Detected unusual activity on your home Wi-Fi network

14%

15%

27%

My location-based information was accessed without my permission

13%

15%

26%

Clicked on a fraudulent email or provided sensitive (personal/financial) information in response to a fraudulent email

13%

Received a phone call or text that resulted in malware being downloaded to your mobile device

13%

17%

28%

Had a child's online activity compromise your security (Parents only)

12%

19%

30%

Had a child that was bullied online (Parents only)

12%

22%

Had your financial information compromised as a result of shopping online

10%

16%

25%

Been a victim of identity theft

10%

18%

26%

Fell for a technical support scam

9%

17%

25%

Experienced a ransomware attack

8%

Had someone gain unauthorized access to a smart home device

7%

13%

19%

Had payment information stolen from your phone

7%

14%

20%

Lost a job or a promotion due to a social media posting you did not post

6%

12%

I haveSomeone I know has

34%
38%
30%

32%

21%

15%

53%

33%

22%

18%

Either I or someone I know has (Net)12
Copyright © 2018 Symantec Corporation

Consumers who were victims of cybercrime globally
lost $172 billion
Theaveragevictimlost$142
Figures represented in billions (USD):

2017

Australia

BrazilCanadaChina

France Germany Hong Kong India

$1.9

$22.5

$1.5

$66.3

$7.1

$2.6

$0.1

$18.5

Indonesia

Italy

Japan Mexico Netherlands

$3.2

$4.1

$2.1

$7.7

$1.6

New
Zealand$0.1

Singapore Spain Sweden

$0.4

$2.1

$3.9

UAE

UK

USA

$1.1

$6.0 $19.4

13
Copyright © 2018 Symantec Corporation

The average cybercrime victim spent nearly
24 hours (23.6 hours) globally (or almost three fullwork days) dealing with the aftermath

2017

Australia

BrazilCanadaChina

France Germany

16.2

33.9

10.3

28.3

16.0

14.6

Hong Kong

India

Indonesia

Italy

Japan

Mexico Netherlands New Zealand Singapore Spain

Sweden

UAE

UK

USA

18.9

50.7

34.1

19.2

5.6

55.1

22.0

47.9

14.8

19.8

5.6

9.0

14.6

22.1

14
Copyright © 2018 Symantec Corporation

Consumers emphasize the importance of online security
Protect me from malicious sites or files

85%

Protect my mobile devices from viruses, malicious apps andsuspicious text messages

84%

Keep my online activity and personal information private

82%

Monitor and restore my identity if it is stolen

82%

Manage all my passwords

81%

Protect my entire home network, not just individual devices,from threats
Monitor and control the content my child(ren) access online(Parents Only)

77%
77%

Secure my Wi-Fi connections outside of the home

70%

Protect the files, photos and videos I have on cloud services

from malicious
threats is thebiggest concern

62%

Control the information my family shares on social networks
Turn off the internet and/or internet access to the devices in
my household

PROTECTION

59%
50%

Important (Top 2)
15
Copyright © 2018 Symantec CorporationYet, one-third store their passwords insecurely and one in five use
the same password for all accounts.
34%

I use different passwords and write them down on a piece of paper32%

I use a technique to remember different passwords

19%

I use the same password for all my accounts

16%

I use different passwords and have them in a file on my computer or smartphone

12%

I use different passwords and have my computer's web browser save them for me

9%

I use different passwords and use a password manager program to store them

6%

Other methods

4%

I just reset my passwords so I don't have to remember them3%

I keep/use the default passwords
I don't have any online passwords

1%

16
Copyright © 2018 Symantec Corporation

Portrait of a Cybercrime Victim

17
Copyright © 2018 Symantec Corporation

They’re adopters of newer security techniques
60%
52%
50%
44%
40%

30%
22%
20%

16%

13%

13%

10%

10%

0%
Security software

Personal VPN

Two-factor
authentication

Fingerprint ID

Facial recognition

Pattern matching

Voice ID

Victim18
Copyright © 2018 Symantec Corporation

And almost 2x as likely to own a connected home device
than non-cybercrime victims.
100%
90%

89%

92%
81%

80%

75%

70%
58%

60%

51%

58%
52%

50%
37%

40%
28%

30%

34%
24%
18%

20%
11%
10%

12%
6%

0%
Smartphone

Laptop computer Tablet or e-reader Desktop computer

Non-victim

Gaming console Smart device that Wearable device or Connected homewith access to the connects to thedevicea smartwatch
internet
internet for
streaming content
Victim19

Copyright © 2018 Symantec Corporation

They’re more likely to use the same online password acrossall accounts and share their device or online accountpasswords with others than non-cybercrime victims.

20%

58%

of cybercrime
victims globally use
the same online
password across all
online accountsof cybercrime
victims shared atleast one device or
account password
with others

20
Copyright © 2018 Symantec Corporation

Consumers’ Contradicting Beliefs

21
Copyright © 2018 Symantec Corporation

Consumers believe cybercrime is wrong and should be treated as acriminal act
Cybercrime should be treated like any other criminal act

81%

Cybercrime is wrong; law enforcement and internet companies should do more toprotect us

80%

Cybercrime is wrong but all I can do is to protect myself and my family

67%

Cybercrime is wrong but it is too difficult to find the attacker

53%

Cybercrime is a fact of life and we have to accept it

Stealing information online is not as bad as stealing property in 'real life'

35%

22%

Agree (Top 2)

22

Copyright © 2018 Symantec Corporation

Yet 43 percent believe it’s sometimes acceptable to commit morally
questionable online behaviors in certain instances
26%

Reading someone else's email without their permission
Sharing things you know are not true on social media

21%

Using a false email or someone else's email to identify yourself online

21%

Using a false photo or someone else's photo to identify yourself online

20%

Putting software on someone's machine that allows you to spy and/or
track them
Changing someone's status, posts or comments on social media
without permission
Posting inflammatory, threatening or sexually explicit comments orphotos online

20%
19%
17%

Accessing someone's financial accounts without their permission

15%

Using someone else's credit card without permission to shop or bookonline15%

Stealing someone's personally identifiable information

15%

Allowing your device to be used to send spam, malware or attack othercomputers
Sending emails that trick people into giving out personal, financial orsensitive details

15%

43%
believe at least
one type ofcybercrime isalways or
sometimes
acceptable

14%

Sometimes Acceptable (Net)23
Copyright © 2018 Symantec Corporation

Nearly one in four believe stealing information online is
not as bad as stealing property in ‘real life’
Stealing information online is not as bad as stealing property in ‘real life’

63%

22%

Disagree (Bottom 2)

Agree (Top 2)

24
Copyright © 2018 Symantec Corporation

State of Consumers’ Trust

25
Copyright © 2018 Symantec Corporation

Consumers generally continue to trust the institutions thatmanage their data and personal information
My employer

17%

63%

19%

My internet service provider

20%

61%

19%

My email provider

20%

61%

19%

Identity theft protection service providers

24%

60%

17%

My bank or financial institutions

18%

58%

24%

Security software

19%

58%

23%

Myself
My social media platform

11%

53%
34%

Credit report companies that gather information without my consent

44%

My government

41%

I've lost all trust + I've lost some trust

0%20%
I trust them the same as I always have

36%
51%

14%
45%

44%

11%
16%

40%
60%
80%
100%
I've gained some trust + I've gained complete trust

120%

26
Copyright © 2018 Symantec Corporation

About the 2017 Norton Cyber Security Insights Report

27
Copyright © 2018 Symantec Corporation

About the 2017 Norton Cyber Security Insights Report
The Norton Cyber Security Insights Report is an online survey of 21,549 individuals ages 18+ across
20 markets, commissioned by Norton by Symantec and produced by research firm Reputation
Leaders. The margin of error for the total sample is +/-.7%. Data was collected Oct. 5 – Oct. 24,
2017 by Reputation Leaders.
Markets: 20
North America

Canada, United States

Europe & Middle East

France, Germany, Italy, Netherlands, Spain, Sweden, United Arab Emirates,
United Kingdom

Asia Pacific

Australia, China, Hong Kong, India, Indonesia, Japan, New Zealand, Singapore

Latin America

Brazil, Mexico

28
Copyright © 2018 Symantec Corporation

How We Define Cybercrime
The definition of cybercrime continues to evolve as avenues open up that allow
cybercriminals to target consumers in new ways. Each year, we will evaluate
current cybercrime trends and update the report’s methodology as needed, toensure the Norton Cyber Security Insights Report provides an accurate snapshot of
the impact of cybercrime as it stands today. In the 2017 Norton Cyber Security
Insights Report, a cybercrime is defined as, but not limited to, a number of specificactions, including identity theft, credit card fraud or having your account password
compromised. For the purposes of this report, a cybercrime victim is a survey
respondent who confirmed one or more of these incidents took place. Visit
https://www.symantec.com/about/newsroom/press-kits to learn more.

29
Copyright © 2018 Symantec Corporation

Demographics Breakdown
Senior

3%
32%

18-24

13%

4%

Gen Z

22%

Boomer

65+

9%
55-64

25-34

50%

19%

50%

Gen Y

35%
Gen X

18%

45-54

35-44

19%

26%

Not victim

36%
Parents64%

Cybercrime
vicitm50%

NonParents

50%

30
Copyright © 2018 Symantec Corporation