Examining Phishing Attempts on Data Breach Victims

Datos Bibliográficos

ID12170232
AutoresChristopher Cro (0000-0003-0827-3567, Queensland University of Technology, autor de correspondencia), Thomas J Holt (0000-0002-5894-0172, Queensland University of Technology)
Año2025
Fecha de publicación2025-11-19
Peer ReviewedSí
Open AccessSí
TipoARTICLE
RevistaSocial Science Computer Review (JOURNAL)
Identificadores de la revistaISSN: 0894-4393 • E-ISSN: 1552-8286
EditorialSAGE Publishing (PUBLISHER • US)
DOI10.1177/08944393251399841
OpenAlexW4416374721
IdiomaEN
Citas recibidas1
Referencias citadas39

Data breaches are an everyday occurrence, exposing the personal details of millions globally. The victim impacts of data breaches can be considerable, including a range of financial harms such as fraud and identity crime, as well as non-financial harms, such as declines in emotional and psychological wellbeing. While these harms are documented, there is less research exploring how data breaches in particular expose victims to further victimisation, specifically through phishing attacks by offenders. Using survey data from 2,019 victims of the Optus and Medibank/AHM data breaches in Australia in 2022, this article examines factors which relate to phishing attempts on these individuals. Results indicate limited factors in predicting those targeted by phishing attempts. This highlights the opportunistic nature of phishing attacks in the aftermath of these two data breaches and a more generalised approach taken by offenders to gain additional details. It also demonstrates a need for continued community education and awareness to protect further personal information from being accessed by offenders into the future

Data breach · Data security · Everyday life · Identity (music · Identity Theft · Personally identifiable information · Phishing · Survey data collection · Cybercrime and Law Enforcement Studies · Information and Cyber Security · Spam and Phishing Detection