Gen Z Cyberattack Stats Show the 'Digital Native' Tag Was a Lie

Every few years a new report arrives to embarrass the phrase "digital native." Kaspersky's latest is the most awkward yet. The cybersecurity company's internal research team surveyed seven thousand two hundred people worldwide and released the findings on October 21, and the Gen Z cyberattack numbers are rough reading: more than half of Gen Z respondents say they have already been hit by attacks on their devices, their online accounts, or their personal data. Growing up online, it turns out, is not the same as knowing how to stay safe there.

The details spell out the gap between confidence and skill. Fifty-seven percent of Gen Z respondents spend more time online than offline, the highest share of any generation in the study, and sixty-seven percent name the smartphone as their main device for getting online. Fifty-nine percent say they feel confident in the digital environment, yet only twenty-eight percent describe their own digital skills as advanced, according to Kaspersky's research team. The protective habits lag even further behind: just twenty-seven percent use antivirus software on their phones, and Gen Z respondents are less likely than older generations to change passwords on a regular schedule.

The losses land exactly where the data lives. Seventeen percent of respondents have had a social media account hacked, and twelve percent have lost access to a gaming account. Those are the two accounts a young person would guard most fiercely: the feed and the inventory. Thirty-eight percent of Gen Z respondents call the photos and personal documents on their phones critically important, which means the device with the least protection is also the one carrying the most valuable cargo. As AI Impact reported on the release, the most online generation is also the least protected.

There is an honest explanation, and it is less about carelessness than about a mix-up: fluency got mistaken for literacy. Filming, editing, and posting are creative skills. Spotting a phishing link, rotating a password, or questioning a free in-game currency offer are security skills, and nobody is born with them. Plenty of young people learned to post long before anyone taught them to read a suspicious message with suspicion. Schools drilled essay structure and left the inbox to chance. The Gen Z cyberattack figures are what that trade looks like in aggregate.

The fix is boring, which is the problem

The fixes that work are unexciting. Changing passwords on a schedule, running antivirus on the phone this generation actually uses, and backing up the photos and documents that matter would cover most of it. Kaspersky's own answer to its findings was a playful one: an interactive cyber-detective game called Case 404, built to sharpen scam recognition, according to coverage of the release from WiseVoter. Teaching defense through play makes sense for a generation that learned everything else through a screen, but a game only helps the people who open it.

The wider problem is structural. The internet spent two decades assigning an entire generation competence by birth year, then acted surprised when the bill arrived. Adults assumed the kids had it handled because the kids could find anything on TikTok. Finding things and defending things were never the same skill. Reading this Gen Z cyberattack survey as a verdict on the generation misses the point; it is a verdict on everyone who assumed the label did the teaching.

Retire the label, teach the skill

None of this argues for panic or for confiscating phones. It argues for retiring a lazy label. "Digital native" sounds like praise, but it functions as an excuse: a reason schools skip real security education and a reason platforms ship weak defaults, assuming young users will figure it out. They did not figure it out, and the Gen Z cyberattack data says so out loud.

What would actually help is specific and unglamorous. Schools could teach threat recognition the way they teach media literacy, because phishing is now part of the media diet. Platforms could ship protections switched on instead of off and stop treating safety settings as a scavenger hunt. Parents could stop assuming fluency equals safety and start asking which of their kid's accounts would hurt most to lose. For thirty-eight percent of Gen Z, the answer is the phone in their pocket.

Related reading: according to our earlier reporting, blaming scam victims is a cop-out when Big Tech built the trap, and iOS 27's scam detection ships off by default, so turn it on.

## image_search_query teenager using smartphone dark room hacker warning illustration ## image_description A young person sits in a dark room lit only by a glowing smartphone screen, with abstract warning symbols and broken padlock graphics floating around them, illustrating how cyberattacks target the mobile devices Gen Z relies on most.