Full Report
Privacy and security online are hot button topics in America today, as a new survey by the Pew Research Center confirms, mirroring similar results from two different privacy and security surveys conducted by ESET.
Analysis Summary
# Main Topic
Public concern regarding online privacy and security in America, confirmed by a Pew Research Center survey that mirrors findings from previous ESET security surveys, specifically highlighting a widespread erosion of trust in both public (government/NSA) and private (commercial) entities handling personal data.
## Key Points
- 87% of Americans had heard of the government collecting communications data for counter-terrorism efforts (Snowden/NSA revelations).
- 80% of U.S. adults believe the public should be concerned about government monitoring of phone calls and internet communications.
- Public concern extends significantly to commercial entities: 91% agree that consumers have lost control over how companies collect and use personal information.
- Public behaviors have shifted due to privacy concerns: 47% of aware Americans reported changing their approach to online activity.
- Specific behavioral changes noted include:
- Less online shopping (26%)
- Less online banking (similar percentage)
- Less inclination to use email (one in four)
- Trust levels in communication methods show deep insecurity:
- Social Media: 81% feel insecure sharing private information.
- Email: 57% feel insecure sending private information.
- Instant Messaging: 68% feel insecure sharing private information.
- Text Messages (SMS): 58% feel insecure sending private information.
## Threat Actors
- **Government Entities (NSA/Intelligence Agencies):** Implicated as primary source of public fear regarding surveillance and data collection.
- **Commercial Entities:** Businesses handling personal information are a significant source of concern due to data collection practices for profit.
## TTPs
The context focuses on surveillance/data collection rather than specific malicious technical TTPs:
- **Government Surveillance:** Collecting information about telephone calls, emails, and other online communications.
- **Commercial Data Gathering:** Collection and use of personal information by companies for profit.
## Affected Systems
- **Communication Platforms:** Email, Social Networking Sites, Instant Messaging services, and SMS/Text Messages.
- **Activities Affected:** Online shopping and online banking.
## Mitigations
Mitigations suggested are user behavior adjustments based on rising concerns, rather than specific technical defenses:
- Public awareness/advocacy for implementing new laws to better regulate government surveillance (81% of those familiar with NSA news favored this).
- Citizens are consciously changing their approach to online activity after revelations about surveillance.
## Conclusion
The threat intelligence narrative is centered on a **societal trust crisis** driven by revelations of broad government surveillance and unchecked corporate data harvesting. This crisis directly impacts online economic activity (shopping, banking) and the daily use of digital communication tools. Organizations handling personal data must address the overwhelming consumer perception of lost control over their information.