‘These findings are not isolated incidents’: Shocking number of workers reportedly willing to sell their company data for money

A fifth of workers have actually sold information about their company for money.
Many also use company money for fraudulent activities
Training is not enough – protections must be put in place

A new study from Cifas aims to quantify insider threats by highlighting how commonplace workplace fraud has become – including the sale of sensitive corporate data for cash.

Nearly one in five people (18%) admit to selling their login credentials for money, which could be the riskiest behavior the company has seen and proof that cyber protection against outside attacks is no longer enough.

But selling company information isn’t the only risk, with workers also likely to engage in other questionable activities that could cost companies money and their safety.

Internal fraud is a growing risk for businesses

Around a quarter think it is acceptable to work secretly for another competing company (24%) and believe expense fraud is justifiable (24%), with 13% knowing someone who has used company funds for gambling or betting.

In fact, getting into the business can often be helped in immoral ways, with around a fifth (19%) knowing someone who used fake professional credentials to get hired.

“These findings are not isolated incidents,” CEO Mike Haley said. “They reflect a broader change in workplace behavior regarding the possibility of committing fraud.”

Cifas highlighted the importance of employee well-being and corporate culture to combat fraud and build loyalty. “Equipping them with the right training not only builds organizational resilience, but also allows people to recognize and challenge risky behaviors before they escalate,” explained Rachael Tiffen, director of learning and public sector.

While training can go some way toward sharing risk with workers, companies must also take some responsibility through the use of insider threat monitoring, more rigorous identity verification, and more rigorous background checks.

Google logo on black background next to text