2017Norton Cyber Security Insights Report
United States ResultsTable of Contents
1.

Key Findings

3–9

2.

Cybercrime by the Numbers

10 – 16

3.

Portrait of a U.S. Cybercrime Victim

17 – 20

4.

Consumers’ Contradicting Beliefs

21 – 24

5.

State of Consumers’ Trust

25 – 26

6.

About the 2017 Norton Cyber Security Insights Report

27 – 30

2
Copyright © 2018 Symantec Corporation

Key Findings

3
Copyright © 2018 Symantec Corporation

Key Findings
When it comes to cyber security, consumers are overconfident in their security prowess, leaving them vulnerable
and enabling cybercriminals to up the ante this year, which has resulted in record attacks.
143 million Americans were affected by cybercrime in 2017. This is more than half the US adult online population.
Nearly eight in ten people (77%) report either experiencing or know some who has experienced cybercrime. Most common
cybercrimes include:
••
•

•
•
•
•

Having a device infected by a virus or other security threat (57%)
Experiencing debit or credit card fraud (54%)
Having personal information involved in a data breach (54%)• Note: Americans were 80% more likely to have their personal information involved in a data breach,compared to the global average (30%)
Having an account password compromised (40%)
Encountering unauthorized access to or hacking of an email or social media account (40%)
Making a purchase online that turned out to be a scam (33%)
Clicking on a fraudulent email or providing sensitive (personal/financial) information in response to a fraudulent
email (34%)

As a result, American consumers who were a victim of cybercrime lost $19.4 billion – an average of $96 per victim – andnearly 20 hours (19.8 hours) dealing with the aftermath.
4Copyright © 2018 Symantec Corporation

Key Findings
Cyber security concerns do not always seem to translate to good behaviors as many consumers put themselves atrisk in their day-to-day lives. This leads us to a startling cybercrime confession: those who emphasize theimportance of online security, generally contradict themselves through their actions, and as a result, are more
likely to fall victim to cybercrime.
Cybercrime victims share three common traits:•••

Overconfident in Cyber Security Prowess: While 58% of consumers have personally experienced cybercrime in thepast year, more than a third of victims gained trust in themselves to manage their data and personal information(37%) and more than a quarter think they’re at a low risk of becoming victim (28%).
Favor Multiple Devices: 46% of U.S. cybercrime victims own a smart device for streaming content, compared to about
one quarter of non-victims. They’re also three times as likely to own a connected home device as non-victims.
Dismiss the Basics: U.S. cybercrime victims practice new security techniques such as such as fingerprint ID (45%),
voice ID (14%), pattern matching (21%), facial recognition (16%), personal VPN (19%), and two-factor authentication(16%). Yet, nearly a quarter of victims use the same online password across all accounts (24%) and 60% share theirpasswords for at least one device or account with others. Additionally, 41% write their passwords down on a piece ofpaper and are almost twice as likely to use different passwords and save their password to a file on their
computer/smartphone than non-victims.

5Copyright © 2018 Symantec CorporationKey Findings
From Millennials to Baby Boomers, to the parents in between, everyone leaves their virtual door open whenit comes to cyber security.
•••

Confession: While Millennials are the most technologically savvy – owning the most devices and adopting security
practices such as pattern matching, face recognition, VPN, voice ID and two-factor authentication – they’re the most
likely to make simple security mistakes and become a victim, with 69% experiencing a cybercrime in the last year
alone:o One in three (39%) Millennials use the same password for all accounts, compared to 7% of Baby Boomers
o 73% of Millennials have shared at least one or more of their passwords with another person, compared to 34% ofBaby Boomers
Confession: Baby Boomers are generally the safest, though they make faux pas as well:o Nearly 69% of Baby Boomers use different passwords, but 45% of Baby Boomers write those passwords down ona piece of paper. Baby Boomers were also less likely to back up their devices, with 12% of Baby Boomers failing toback up any devices versus 4% of Millennials.
Confession: Parents are worried about many things when it comes to their child and the Internet – but fewer act. 95%of parents worry about their children and the Internet, yet only 29% of parents always supervise their children online
when using social media, and less than a third always supervise their children online when they are playing online
games or watching videos, streaming movies or TV shows online. Meanwhile, 9% of parents do not take any actions toprotect their children online.
6Copyright © 2018 Symantec Corporation

Key Findings
Consumers’ boundaries skewed between cybercrime and “real life”••

Confession: While 81% of consumers think a cybercrime should be treated as a criminal act, 41% believe it’ssometimes acceptable to engage in morally questionable online behaviors in certain instances:o One fourth (28%) say reading someone’s emails without their consent is sometimes acceptableo 20% believe using a false email or someone else's email to identify their self online is sometimes acceptableo 18% believe that accessing someone's financial accounts without their permission is sometimes acceptable
Interestingly, victims of cybercrime were more likely to think it’s acceptable to commit cybercrime than non-victims:
o 32% say reading someone’s emails without their consent is sometimes acceptable compared to 14% of nonvictims
o 22% believe using a false photo or someone else's phone to identify themselves online is sometimes acceptableo 21% believe that accessing someone's financial accounts without their permission is sometimes acceptablecompared to 9% of non-victims

7
Copyright © 2018 Symantec Corporation

Key Findings
Despite this year’s cyberattacks, consumers generally continue to trust the institutions that manage
their data and personal information. However, they are not as trusting of some institutions andorganizations.
• Consumers have gained or maintained trust in the following institutions to manage their data andpersonal information:
o 71% in identity theft protection services
o 74% in email providers
o 76% in internet service providers
o 76% in financial institutions• Concerningly, however, 53% of consumers lost trust in their government

8Copyright © 2018 Symantec Corporation

What to Do?
Stick to the basics. The realities of cybercrime can feel daunting, but practicing basic behaviors,such as proper password hygiene will go a long way. While new technologies such as facialrecognition and voice ID are effective, it all starts with basic security measures such as:
●

●

●

●
●

Craft a strong, unique password using a phrase that consists of a string of words that are easy for you to memorize, but
hard for others to guess. Don’t tie your password to publicly available information as it makes it easier for the bad guys toguess your password. The longer, the better! Additionally, if your account or device enables it, consider two-factor
authentication for an additional layer of security. Finally, once you’ve created a strong password, stick with it until you’re
notified of a security breach. If you feel overwhelmed, use a password manager to help!
Using unprotected Wi-Fi can leave your personal data vulnerable to eavesdropping by strangers using the same network
so avoid anything that involves sharing your personal information when connected to an open Wi-Fi network. If you
do use public Wi-Fi, consider using a Virtual Private Network (VPN) to secure your connection and help keep yourinformation private.
Make it a habit to change default passwords on all network-connected devices, like smart thermostats or Wi-Firouters, during set-up. If you decide not to use Internet features on various devices , such as with smart appliances,disable or protect remote access as an extra precaution. Also, protect your wireless connections with strong Wi-Fi
encryption so no one can easily view the data traveling between your devices.
Think twice before opening unsolicited messages or attachments, particularly from people you don’t know, or clicking
on random links.
Protect your devices with a robust, multi-platform security software solution to help protect against the latest threats.
9Copyright © 2018 Symantec Corporation

Cybercrime by the Numbers

10Copyright © 2018 Symantec Corporation

Within the last year, 143 million people in the US
experienced cybercrime
Adult population – 251 million
Online population (98%) – 246 million

Experienced Cybercrime (58%) - 143 million

11
Copyright © 2018 Symantec Corporation

Nearly eight in ten Americans (77%) report either experiencing orknow someone who has experienced cybercrime
Had a device computer/tablet/phone infected by a virus or other security threat
30%
38%
Been notified that your personal information was involved in a data breach25%
39%
Experienced credit or debit card fraud
28%
34%
Had an account password compromised
40%
21%
25%
Unauthorized access to or hacking of your email or social network profile
40%
24%
21%
Had a child's online activity compromise your security (Parents only)
36%
20%
18%
Had a child that was bullied online (Parents only)
43%
28%
18%
Been a victim of identity theft40%
24%
18%
Made a purchase online that turned out to be a scam
33%
18%
17%
Had your financial information compromised as a result of shopping online
33%
19%
16%
Clicked on a fraudulent email or provided sensitive (personal/financial) information in… 16%
34%
21%
My location-based information was accessed without my permission
29%
18%
15%
Detected unusual activity on your home Wi-Fi network
27%
15%
14%
Fell for a technical support scam
30%
19%
13%
Had others use your home Wi-Fi without permission
27%
17%
13%
Received a phone call or text that resulted in malware being downloaded to your mobile… 12%28%
18%
Had payment information stolen from your phone 11%25%
15%
Experienced a ransomware attack 10%
25%
16%
Had someone gain unauthorized access to a smart home device 9%23%
14%
Lost a job or a promotion due to a social media posting you did not post 9% 13% 21%
I haveSomeone I know has

57%
54%
54%

Either I or someone I know has (Net)
12Copyright © 2018 Symantec CorporationCybercrime victims spent nearly $19.4 billion
dealing with the consequences
Theaverage
victimlost$96

13Copyright © 2018 Symantec CorporationThe average cybercrime victim spent 19.8 hours
dealing with the aftermath

14Copyright © 2018 Symantec Corporation

Americans emphasize the importance ofonline security
Protect me from malicious sites or files

85%

Monitor and restore my identity if it is stolen

85%

Protect my mobile devices from viruses, malicious apps and suspicious text
messages

84%

Keep my online activity and personal information private

84%

Monitor and control the content my child(ren) access online (Parents Only)

80%

Manage all my passwords

79%

Protect my entire home network, not just individual devices, from threats

79%

Secure my Wi-Fi connections outside of the home

74%

Protect the files, photos and videos I have on cloud services

65%

Control the information my family shares on social networks

64%

Turn off the internet and/or internet access to the devices in my household

52%

Important (Top 2)
15
Copyright © 2018 Symantec CorporationYet, one-third store their passwords insecurely and more than one
in five use the same password for all accounts.
I use different passwords and write them down on a piece of paper

39%

I use a technique to remember different passwords

23%I use the same password for all my accounts

23%

I use different passwords and have them in a file on my computer orsmartphone20%

I use different passwords and have my computer's web browser save them forme

12%

I use different passwords and use a password manager program to store
them

10%

Other methods

7%

I just reset my passwords so I don't have to remember them4%

I keep/use the default passwords

4%

I don't have any online passwords

1%

16
Copyright © 2018 Symantec CorporationPortrait of a U.S. Cybercrime Victim

17Copyright © 2018 Symantec Corporation

They’re adopters of newer security techniques
60%
55%
50%
45%
40%

30%
21%

19%

20%

16%

16%

14%

10%

0%

Security software

Personal VPN

Two-factor
authentication

Fingerprint ID

Facial recognition

Pattern matching

Voice ID

Victim18
Copyright © 2018 Symantec Corporation

They’re 3x as likely to own a connected home device thannon-victims.
100%
90%

92%
86%
79%

80%

72%

68%

70%

60%

60%

54%

50%

45%
38%

40%
30%

25%

20%

22%

18%

15%

10%
0%

46%

43%

6%
Smartphone

Laptop computer Tablet or e-reader Desktop computer Gaming console Smart device that Wearable device or Connected homea smartwatch
devicewith access to the connects to theinternet forinternetstreaming content
Non-victim
Victim
19Copyright © 2018 Symantec Corporation

They’re more likely to use the same online password across all
accounts and share their device or online account passwords
with others than non-cybercrime victims.

60%
Of cybercrime
victims shared theirpasswords for atleast one device or
account with others

24%
Nearly a quarter ofU.S. cybercrime
victims use thesame online
password across all
online accountsHowever, only 17% of non-cybercrime victims reusepasswords and 37% share their passwords with others.
20
Copyright © 2018 Symantec Corporation

Consumers’ Contradicting Beliefs

21
Copyright © 2018 Symantec Corporation

Consumers believe cybercrime is wrong andshould be treated as a criminal act
Cybercrime is wrong; law enforcement and internet companies should do more toprotect us

82%

Cybercrime should be treated like any other criminal act

82%

Cybercrime is wrong but all I can do is to protect myself and my family

66%

Cybercrime is wrong but it is too difficult to find the attacker

46%

Cybercrime is a fact of life and we have to accept it

Stealing information online is not as bad as stealing property in 'real life'

37%

23%

Agree (Top 2)
22Copyright © 2018 Symantec CorporationYet, 41 percent of U.S. consumers believe it’s sometimes acceptable
to commit morally questionable online behaviors
Reading someone else's email without their permission

28%

Putting software on someone's machine that allows you to spy and/ortrack them

21%

Sharing things you know are not true on social media

21%

Using a false email or someone else's email to identify yourself online

20%

Using a false photo or someone else's photo to identify yourself online

19%

Posting inflammatory, threatening or sexually explicit comments orphotos online

19%

Accessing someone's financial accounts without their permission

18%

Using someone else's credit card without permission to shop or bookonline17%

Stealing someone's personally identifiable information

16%

Allowing your device to be used to send spam, malware or attack othercomputers
Sending emails that trick people into giving out personal, financial orsensitive details

16%
15%

Sometimes Acceptable (Net)23
Copyright © 2018 Symantec Corporation

And nearly one in four believe stealing information
online is not as bad as stealing property in ‘real life’

64%

Disagree (Bottom 2)

23%

Agree (Top 2)

24
Copyright © 2018 Symantec Corporation

State of Consumers’ Trust

25
Copyright © 2018 Symantec Corporation

Americans generally continue to trust the institutions thatmanage their data and personal information
Myself

37%

52%

11%

My employer

20%

59%

21%

My bank or financial institutions

23%

53%

23%

Security software

25%

My email provider

27%

55%

19%

My internet service provider

24%

58%

18%

51%

21%

Identity theft protection service providers

29%

My social media platform

22%

54%

My government
10%

20%
Lost Trust

30%

14%

32%

53%
0%

15%

45%

39%

40%

Maintained Trust

50%

60%

70%

80%

90%

100%

Gained Trust
26

Copyright © 2018 Symantec Corporation

About the 2017 Norton Cyber Security Insights Report

27
Copyright © 2018 Symantec Corporation

About the 2017 Norton Cyber Security Insights Report
The Norton Cyber Security Insights Report is an online survey of 21,549 individuals ages 18+ across
20 markets, commissioned by Norton by Symantec and produced by research firm Reputation
Leaders. The margin of error for the total sample is +/-.7%. The U.S. sample reflects input from
1,003 U.S. adults ages 18+. The margin of error is +/- 3.1% for the total U.S. sample. Data wascollected Oct. 5 – Oct. 24, 2017 by Reputation Leaders.
Markets: 20North America

Canada, USA

Europe & Middle East

France, Germany, Italy, Netherlands, Spain, Sweden, UAE, UK

Asia Pacific

Australia, China, Hong Kong, India, Indonesia, Japan, New Zealand, Singapore

Latin AmericaBrazil, Mexico

28
Copyright © 2018 Symantec Corporation

How We Define Cybercrime
The definition of cybercrime continues to evolve as avenues open up that allow
cybercriminals to target consumers in new ways. Each year, we will evaluate
current cybercrime trends and update the report’s methodology as needed, toensure the Norton Cyber Security Insights Report provides an accurate snapshot of
the impact of cybercrime as it stands today. In the 2017 Norton Cyber Security
Insights Report, a cybercrime is defined as, but not limited to, a number of specificactions, including identity theft, credit card fraud or having your account password
compromised. For the purposes of this report, a cybercrime victim is a survey
respondent who confirmed one or more of these incidents took place. Visit
https://www.symantec.com/about/newsroom/press-kits to learn more.

29
Copyright © 2018 Symantec CorporationDemographics Breakdown
14%
Senior4%

Boomer

18-24

13%

4%

Gen Z

33%

65+

19%

25-34

55-64

18%

51%

49%

Gen Y

36%
Gen X

19%

23%
Not victim

45-54

35-44

18%

23%
Parents

77%

Cybercrime
vicitm

50%NonParents

50%

30
Copyright © 2018 Symantec Corporation