## 5 Discussion  
This is the first time that a scenario study (Study 1) was complemented by a real-life field experiment (Study 2) for studying behavior and emotional reactions to cybersecurity breach situations of IoT devices. For the broad range of situations presented in both studies--scenarios of cybersecurity breaches and a simulation of the same scenarios in the household field experiment--we found that the elicited experiences were clearly emotional, with individual differences in the reported responses. These emotional aspects confirm the need to explore the psychological perspective of cybersecurity breaches. The findings indicate that emotional responses vary significantly based on the type of device involved, aligning with previous research that suggests that emotions can be pivotal in shaping user behavior and attitudes toward IoT security. These insights emphasize  
Figure 9: Estimated marginal means of the emotional reactions on the third dimension for different phases of the household experiment. the need for further research into tailored security measures for different IoT devices and highlight the importance of designing user-friendly security solutions that account for emotional reactions. Application of the Component Process Model [15] and the GRID framework [24], going beyond using only emotion terms, allowed us to detect and explore aspects of emotion processes that would not have been identified by using standard approaches. The emotion perspective is relevant in cybersecurity breach situations, as all the emotion components representing the whole emotion process (appraisals, action tendencies, bodily reactions, expressions, subjective feelings) plus emotion regulation vary systematically across persons, devices, field experiment phases, and scenarios. We found a replicable structure of these emotion processes in both studies, which allows for a description of the individual differences through the emotion lens as well as the studying of the behavior in different cybersecurity breach situations. In both studies, we found a comparable three-dimensional structure for the emotion features, which, by and large, confirms emotion structures that were found in recent studies on cybersecurity breaches using the Component Process Model [19; 20]. The three-dimensional structure consists of a general intensity dimension, a constructive vs. unconstructive reaction dimension, and an affective vs. cognitive-motivational dimension. When looking at the quantitative differences in the identified emotion dimensions, the main finding of the first scenario study is that an anticipated cybersecurity breach of a security camera evokes significantly more intense emotions than cybersecurity breaches of other IoT devices. While cybersecurity breaches on all IoT devices have both an impact in cyberspace and a direct physical impact (e.g., unauthorized activation of lights), the security camera has the greatest potential to affect our privacy. This could explain why people had the strongest reactions to the security camera scenarios. The key finding from the second study, a household field experiment, is that people appear to have difficulty detecting subtle irregularities that may indicate cybersecurity breaches. During the second phase, all households have been frequently confronted with mild irregularities. Despite this objective exposure, less than 10% of the reported emotional experiences were due to these experimentally introduced irregularities. Moreover, we observe that the intensity of the emotional reactions, as well as the tendencies to react constructively, systematically decreases across the three phases. The expected increase in the second phase, when participants were exposed to a variety of irregularities, was thus not observed.