As we consider New Year’s resolutions, one idea rises to the top among personal priorities: resolving to better protect ourselves against cybercrime.
The significance of this resolution becomes clear when considering the prevalence of cyberattacks and data breaches. In the first half of 2026 alone, the Identity Theft Resource Center reported 1,803 data breaches. The magnitude of that number may seem unsettling, and it’s even more sobering when we recognize that breaches are only expected to increase.
The term “cyberattack” refers to deliberate exploitation of computer systems or other technology-dependent systems, as defined by Technopedia. The consequences can be as singular as theft of one person’s identity or as widespread as a data breach of a government agency, large company or national organization. Most of us have experienced at least an attempted cybercrime — from the receipt of a simple “phishing” email to having our personal information exposed via a large-scale computer hack.
Although we cannot control the digital security practices of the many companies with which most of us interact (banks, grocery stores, online retailers, gas stations, etc.), we CAN control our own personal “cyber hygiene.” Unfortunately, many technology users fail to follow best practices for protecting ourselves. Simply using the latest anti-virus application for your computer is not enough.
How can you protect yourself? These practices can help:
Manage your devices.
- Install the latest antivirus and anti-spyware programs on all devices, and use them to scan regularly. Update these programs when updates become available.
- Access sensitive data only through a secure location or device. Never access personal data via a public computer, such as in a hotel or cybercafe.
- Set up a separate computer for children to use for online activities. Monitor their online actions.
Protect passwords.
- Use a personalized identifier for financial accounts to access online. Never use your Social Security number in any part of your login activity.
- Avoid using common passwords. Use long phrases and complicated combinations of letters, numbers and symbols.
- Avoid storing passwords in email folders or leaving them on desktops. Consider using a password manager and two-step authentication.
Surf the web safely.
- Don’t connect to the Internet via unsecured or unknown wireless networks, such as those in public places; these networks may lack virus protection and can be susceptible to attacks.
- Ad and script blockers can be a helpful tool.
- Always monitor children’s use of the web.
Protect information on social networks.
- Limit the amount of personal information you post on networking sites. Never post any part of your Social Security number, and be careful about sharing address information or phone numbers.
- Consider also limiting announcements about births, children’s birthdays, or loss of loved ones. Sharing too much information can make you susceptible to fraudsters, allowing them to pass tests related to the authentication of your personal information. Never underestimate the public sources that someone might use to learn critical facts about you.
Protect your email accounts.
- Delete emails that include financial information beyond the time that it’s needed. Continuously assess whether you need to store any personal or financial information in an email account.
- Use secure data storage programs to archive critical data and documents.
- Review unsolicited emails carefully. When in doubt, delete. Never click links in unsolicited emails or in pop-up ads, especially those that warn that your computer is infected with a virus and request that you take immediate action. This caution should extend even to links to “unsubscribe.”
- Establish separate email accounts for personal correspondence in financial transactions.
Safeguard your financial accounts.
- Review all credit card and financial statements as soon as they arrive or become available online. If any transaction looks suspicious, immediately contact the financial institution where the account is held.
- Never send account information or personally identifiable information over email, chat or any other unsecure channel.
- Suspiciously review any unsolicited email requesting personal information. Never respond to an information request by clicking a link in an email. Instead, type the website’s URL into the browser yourself.
- Avoid developing any online patterns of money movement, such as wires, that cyber criminals could replicate to make money movement appear legitimate.
It is important to continue staying abreast of changes in best practices and to understand how new technologies can help you to protect yourself and your family. Discuss best practices as a family. Read articles about how to avoid being a victim.
Besides the steps you can take to personally secure your information, D.A. Davidson Companies and its subsidiaries are committed to protecting your privacy and personal information. Check out our Fraud Prevention page to learn more about cybercrime and how D.A. Davidson can help.
Information contained herein has been obtained by sources we consider reliable, but is not guaranteed, and we are not soliciting any action based upon it. Any opinions expressed are those of the author and based on interpretation of data available at the time of original publication of this article. These opinions are subject to change at any time without notice. Investors should consult their financial and/or tax advisor before implementing any investment plan. Copyright D.A. Davidson & Co., 2026. All rights reserved. Member FINRA and SIPC.