Most Online and Least Protected: The Gen Z Security Gap

Generation Z grew up with a phone in hand — and that may be exactly the problem. A new global study from Kaspersky found that more than half of Gen Z respondents have already experienced a cyberattack, and the Gen Z Security Gap starts with a dangerous mismatch: sky-high digital confidence paired with sloppy security habits.

Confident online, careless in practice

The research, conducted across eighteen countries with seven thousand two hundred respondents and released on October 21, found that fifty-two percent of Gen Z participants had experienced attacks involving their devices, online accounts or personal data, as reported by CAJ News. Nearly one in five said a social media account had been hacked, and about one in eight had lost access to a gaming account.

Gen Z spends more time online than any generation surveyed, with well over half saying they live more of their life online than off. Two-thirds named the smartphone as their primary way of getting on the internet. Yet while almost three in five feel confident navigating the digital world, barely more than one in four consider their digital skills advanced.

That confidence gap shows up in the habits. Just over a quarter use antivirus software on their phones, and a similar share back up important data regularly. Changing passwords on a routine basis is less common among Gen Z than among older generations. The generation that can spot a fake meme in seconds is, statistically, leaving its front door unlocked.

What the hackers actually take

The stakes are higher than a hijacked meme page. Photos and personal documents were rated critically important by nearly two in five young respondents, and about three in ten put passwords and login credentials at the top of what they value. A compromised phone can expose all of it at once: identity documents, email accounts, social profiles and financial apps, letting a single breach spill across every part of someone's life.

Gaming accounts deserve special attention. With one in eight young players losing access, attackers clearly see game libraries, skins and linked payment methods as worthwhile targets. It is the same playbook as phishing, just aimed at the accounts people guard least carefully.

The fix list that takes ten minutes

Kaspersky's own recommendations are refreshingly boring: run protection against malware and phishing, use strong unique passwords for different accounts, and back up important data on a schedule. None of it requires expertise, which is precisely the point — the basics close most of the gap.

"Familiarity should not be confused with security expertise," said Irina Ermilova, the company's vice president for consumer product management. She stressed that navigating apps confidently does not mean you can spot a scam or protect personal information — two very different skills that feel identical until something goes wrong.

The company has also built an interactive cyber-detective game to teach players how to recognize scams, phishing attempts and account takeovers, aimed especially at gaming environments where young users spend their time. Gamifying the lesson may land better than another lecture about password hygiene.

A grain of salt, and the real takeaway

One caveat is worth keeping: Kaspersky sells security software, so a study concluding that everyone needs more security products should be read with that in mind. But the underlying habits data does not depend on trusting a vendor — password reuse, missing backups and absent phone protection are fixable regardless of whose logo is on the report.

The pattern also fits what fraud researchers keep finding: most attacks do not begin with a technical break-in. They begin with a convincing message, which is why social engineering keeps working on every generation, confident or not. That is the same dynamic behind the fake job offers flooding career platforms this year.

The bottom line of the Gen Z Security Gap is not that young people are bad at technology — it is that being good at technology is not the same as being safe with it. Ten minutes of boring setup buys back the confidence the study found was mostly an illusion.

Source: CAJ News, reporting on Kaspersky's research of 7,200 respondents across 18 countries.

Related on GenZ NewZ: Fake Job Scams Are Targeting Gen Z: How to Protect Yourself, OpenAI Models Hacked Sites and a Crypto Wallet