## 5 Discussion
### **Mishandling Information**  
Mishandling information can be defined as handling data without having the appropriate skills [67]. Employees could not understand the sensitivity of official data, and the data were being exposed to unknown third parties. This mishandling of information is unintentional and termed as a human error. Human errors are due to the lack of skills and basic knowledge, which is studied under the social system [55]. Literature reports that most of the security issues arise due to human-related errors [68]. Moreover, a research study states that there is a higher tendency for human-related errors when adjusting to a new work environment [10], and human factors are identified as the major cause of information leakages [69]. The current study extends the literature by reporting human errors due to mishandling information as a significant social cybersecurity challenge in the HERS in a major crisis. R017 stated, _\"The hacker was able to get access to official project documents because of information exploited by our employee. I don't appreciate it, but considering that it is the first time our employees were doing work from home, they were unprepared for it. Also, the employee sends a written apology as he didn't perform it intentionally. Instead of firing him, we must think of a solution\"_. **Coronavirus Vaccine Scam**  
One of the scams employees reported during remote working was related to the coronavirus vaccine. Participants revealed that they got scammed by paying to get the COVID-19 vaccine. The scam happened due to employee mistakes, and human errors are studied under the social system in the STS literature [55; 58]. Therefore, the scam has been classified as a people-related cybersecurity challenge. Recent research studies have highlighted the ethical issues in vaccination policies and vaccine hesitations among students in a cross-sectional analysis [70; 71]. Moreover, the literature also explored the impact of remote work policies on external cybersecurity threats, including scams [72]. These articles talk about coronavirus vaccine issues and scams during this recent crisis. However, they have not directly addressed the vaccine scam issue as a key social cybersecurity challenge during the major crisis and reported this scam exclusively happening to HERS employees amidst the major crisis in Australia. The current study extends the literature by reporting real cases outlined by participants who got scam messages to pay for the coronavirus vaccine through addresses that look like official institution emails and apps. [PERSON] revealed that _\"If I'm being specific, one of them was a hoxx email telling you to click this link to register for your COVID-19 vaccination when the disease first appeared and we were all in a rush to get the shot. When I clicked the link, it asked for my credit card number, which I provided, and I was prompted to pay around I think 200 Australian dollars. The email was from one of our official addresses, which I believe was hacked\"_. **Hi Colleague Scam**  
Another significant cybersecurity scam incident reported by the participants was a scam where the hacker pretends to be their colleague or friend. Therefore, it was called the hi colleague scam. This scam is like the hi mum scam. A report reveals that Australians have lost at least USD 7.2 million to the hi mum scam [73]. The hi mum scam usually unfolds through a message or phone call where the fraudster, posing as the son or daughter, claims to be in a serious situation, such as being arrested, hospitalized, or stranded in a foreign location. They urgently request money for bail, medical bills, or travel expenses. The scam is classified under the people-related cybersecurity issue due to the involvement of human faults [58]. Although few studies have reported on charity scams and fraudulent job advertisements during the recent major crisis [74; 75], it appears that specific research focusing on this scam is scarce.