Oh Behave! The 2026 Cybersecurity Attitudes And Behaviors Report
Each year, the National Cybersecurity Alliance releases research to better understand the public’s security behavior and to act as a call to action for better secure habits online.
What is Oh Behave!?
Oh, Behave! is our annual report on global cybersecurity attitudes, behaviors and trends. Now in its sixth year, it’s produced in partnership with CybSafe. The 2026–2027 report surveyed 5,000 adults across the United States, United Kingdom, India, Brazil and Singapore to explore how people approach online security, what worries them and where the gaps remain.
Why it matters
This year’s findings bring good news: people understand that cybersecurity matters, and they’re ready to act. The challenge is turning that awareness into everyday habits, especially as AI changes how we work and communicate. With practical training, clear workplace guidance and a few simple habit changes, individuals and organizations can close the gap between knowing and doing.
Key Findings
People care about staying secure
81% of U.S. adults say staying secure online is a priority, in line with the other countries surveyed.
58% of U.S. adults worry about becoming a victim of cybercrime.
People care about staying secure
81% of U.S. adults say staying secure online is a priority, in line with the other countries surveyed.
58% of U.S. adults worry about becoming a victim of cybercrime.
AI is moving faster than workplace guidance
80% of people now use AI, but 56% of AI users have received no security or privacy training on it.
32% of workplace AI users have shared sensitive company information with an AI tool without their employer knowing, and 43% say their employer hasn’t clearly explained what’s OK to share.
AI is moving faster than workplace guidance
80% of people now use AI, but 56% of AI users have received no security or privacy training on it.
32% of workplace AI users have shared sensitive company information with an AI tool without their employer knowing, and 43% say their employer hasn’t clearly explained what’s OK to share.
Training works, but too few people get it
88% of people who received cybersecurity training found it useful. After training, 54% got better at spotting phishing and 49% set up multifactor authentication.
Fewer than half of employed people globally (47%) face any mandatory cybersecurity training.
Training works, but too few people get it
88% of people who received cybersecurity training found it useful. After training, 54% got better at spotting phishing and 49% set up multifactor authentication.
Fewer than half of employed people globally (47%) face any mandatory cybersecurity training.
The report gives you the top findings from our research, focused on what’s most relevant to your business. It also includes a link to the full academic report if you want every chart and table.
Download your copy
Featured Articles
2026 Small Business Cybersecurity Awareness & Practices Survey
New national survey of 1,000 SMB leaders reveals a dangerous gap between confidence and readiness. Download the full report to see where small businesses stand.
