More than half of Generation Z respondents have experienced cyberattacks targeting their devices, online accounts or personal data, according to a new Kaspersky study. The findings highlight a gap between Gen Z’s confidence in navigating the digital world and their adoption of basic cybersecurity practices.

The research, conducted by Kaspersky’s internal market research center among 7,200 respondents across 18 countries, found that 57% of Gen Z participants spend more time online than offline, the highest proportion among all generations surveyed. Smartphones are central to their digital habits, with 67% identifying them as their primary device for regular internet use.

Despite their extensive online activity, confidence does not necessarily translate into advanced digital skills. While 59% of Gen Z respondents said they feel confident in the digital environment, only 28% considered their digital skills advanced.

The study also revealed gaps in their security practices. Just 27% of Gen Z respondents use antivirus software on mobile devices, making them less likely than other generations to adopt this protection. They are also less likely to change their passwords regularly.

These habits coincide with significant exposure to cyber risks. Overall, 52% of respondents in this generation said they had experienced attacks involving their devices, online accounts or data. In addition, 17% reported having a social media account hacked, while 12% had lost access to a gaming account.

Smartphones Hold Valuable Data, but Protection Remains Limited

The findings highlight the importance of smartphones as repositories for Gen Z’s personal information. Photos and personal documents were each considered critically important by 38% of respondents, while 30% identified passwords and login credentials as highly valuable information.

However, protective measures remain limited. Only 28% of Gen Z respondents regularly back up important data stored on their smartphones, leaving valuable information potentially vulnerable to loss or unauthorized access.

A compromised smartphone can expose more than the device itself. Attackers may gain access to personal photographs, identity documents, email accounts, social media profiles, financial services and other sensitive elements of a user’s digital life.

Kaspersky Calls for Cybersecurity to Become an Everyday Habit

To help raise awareness of cyberthreats among younger users, Kaspersky has launched Case 404, an interactive online game that introduces players to fictional investigations inspired by real-world digital threats.

The game helps participants learn how to identify scams, phishing attempts and account takeover techniques commonly encountered in gaming environments, while developing practical skills to stay safer online.

Kaspersky recommends integrating cybersecurity into everyday digital routines rather than treating it as a response to incidents after they occur.

The company says comprehensive security solutions, such as Kaspersky Premium, can help protect devices against malware, phishing and other online threats. With smartphones serving as the primary internet access device for many Gen Z users, protection should extend across mobile devices and desktop computers.

Password management tools, including Kaspersky Password Manager, can also help users create strong, unique passwords for different accounts and store them securely, reducing the potential impact of stolen credentials or data breaches.

“Gen Z has grown up online, so digital services often feel intuitive and familiar to them. However, familiarity should not be confused with security expertise. Being able to navigate apps, platforms and devices confidently does not necessarily mean being able to identify scams, manage passwords securely or protect personal data,” said Irina Ermilova, Vice President for Consumer Product Management at Kaspersky.

She added that the findings show cybersecurity tools and habits need to become as natural a part of everyday digital life as messaging, gaming and using social media.

The study was conducted by Kaspersky’s market research center in 2026, with 7,200 respondents from Brazil, China, Colombia, Egypt, France, Germany, India, Indonesia, Italy, Malaysia, Mexico, Russia, Saudi Arabia, Spain, South Africa, Thailand, Turkey and Vietnam.