Office workers not above trying to access colleagues’ devices – survey

Poll says more than a third have tried to gather private data on customers and clients

Pro

Pictured: Eamon Gallagher, IT.ie, and Tristan Basteup, SonicWall

A survey from managed services provider IT.ie and SonicWall has lifted the lid on some troubling behaviour by employees when it comes to device and data security. The poll of 1,000 Irish office workers by Censuswide found that 30% had tried to access a colleague’s device without permission in the past year. Furthermore 35% said they had actively sought out private information about a colleague, client, or customer such as their age, salary, CV or home address, from a work computer system.

Alongside the above dubious behaviours, the survey also showed that a cohort of office workers may see themselves as Internet sleuths, possibly influenced by viral online videos featuring content creators who try to outsmart online scammers. Almost two-in-five (38%) had engaged with a scammer – intentionally or unintentionally at work in the last 12 months, while one in four had sent an angry response to someone who they presumed to be a scammer. A further 17% said they have either duped, or attempted to dupe, an online scammer.

Concerningly, 17% had engaged with a scammer to try to convince them not to target the business – an approach that still carries significant risk.

Eamon Gallagher, founder and managing director, IT.ie, said: “The report highlights some troubling behaviours among office workers that has the potential to expose businesses to considerable risk. While some employees, particularly from the younger cohort, attempt to challenge, outsmart, or reason with scammers, cybercriminals will often capitalise on their efforts, using manipulation tactics that leave the organisation more vulnerable to compromise.

“This behaviour is similar to that of those who attempt to gain access to their colleague’s device or are seeking out their personal information. While their actions may not always stem from malicious intent, it does represent a breakdown in boundaries and data responsibility.

“While these findings may raise concerns, they ultimately represent a valuable opportunity for businesses. By investing in employee training and onboarding, strengthening internal policies, implementing more robust access controls, and creating better cyber security awareness, organisations can address these vulnerabilities head-on. At the end of the day, a company’s cyber security is only as strong as its least prepared employee.”

Stuart Taylor, senior director of regional sales for Northern Europe, SonicWall, said: “These findings are a stark reminder that the greatest risks often come from within the organisation, not intentionally, but through curiosity, complacency, or even misplaced confidence.”

TechCentral Reporters

Read More: cyber security IT.ie security