Cybersecurity risks rise amid employee negligence and massive data leaks

Recent findings highlight significant vulnerabilities in cybersecurity behavior and data protection. The Alert Online 2026 Cybersecurity Behavior Study by the National Cyber Security Centre (NCSC) reveals that employees often underestimate their digital risks. Only 32% consistently use two-step authentication for work, and just 13% regularly use a password manager. Furthermore, over half of employees have shared personal documents, such as CVs or employee data, with AI tools.

Compounding these behavioral issues, a massive dataset known as the ‘Compilation of Many Breaches’ (COMB) has made over three billion email addresses and passwords publicly accessible. This leak includes credentials belonging to Dutch ministers, military personnel, diplomats, and employees of critical infrastructure, such as nuclear power plants and banks.

Experts suggest that while password leaks have been a known issue for decades, the mass availability of such data is a major concern. To combat these risks, the NCSC recommends the EAST model for employers: making secure behavior Easy, Attractive, Social, and Timely. In the Netherlands, small businesses can access subsidies through the ‘Mijn Cyberweerbare Zaak’ scheme until November 30, 2026, to help cover up to 50% of cybersecurity costs.