Five Disappointingly Boring Methods of Hackers

The movies tell us that hackers are hip young rebels and international secret agents with black leather jackets, cool shades and wild haircuts.

They might work for secret organizations or they might be anarchists trying to shake things up. They stare at fields of green text that only they can comprehend and dance their fingers along the keyboards while shouting about jacking into mainframes and subverting the dot matrix.

Screenwriters have a lot of fun coming up with exciting ways to present the computer criminal, perhaps because the reality is more boring. Here are some of the more disappointing methods hackers use to swipe your stuff:

Mass Data Theft

The recent Ashley Madison hack is eye-opening for a number of reasons, one being that it helps to dispel the myth that hackers tend to specifically target their marks.

Selecting a specific individual to steal from, and then succeeding in breaking their security, is actually a lot tougher than stealing from hundreds of people at a time through a single website hack and hoping you hit a high-value target.

For businesses worried about liability and workplace exposures, see Business Risk & Workplace Management — Article Summaries.

123456

123456 is the most common password on the planet. It's easy enough to guess passwords until you get one right, but it's even easier to keep trying logins until you find an account protected by a weak password.

Hackers often scan many accounts quickly and move on when they find poorly secured ones. Consider protections beyond passwords and learn how insurance products can fit into an overall risk plan such as Internet Security Insurance.

Physical Theft

Some criminals don't even use computers — they steal actual credit cards, receipts, or wallets. Again, many are opportunists rather than sophisticated cybercriminals.

Why pickpocket when you can wait in a café for someone to forget their wallet on a table? Keeping physical items secure is still an important part of reducing theft risk.

"Stay Logged In?"

If you ever feel like becoming a cybercriminal, hang around a library for a day, or anywhere else where computers are free for public use.

Every time someone packs up and leaves, hop on their computer and see if they forgot to log out of bank, payment, or email accounts. Most people remember to log out, but an opportunist only needs one hit.

Peekaboo

And then there's just good old-fashioned peeking. It's not hard to watch someone's hands as they enter a password or look over their shoulder when they read their email.

Simple vigilance — shielding screens, avoiding password entry in public, and using two-factor authentication — reduces this risk significantly.

Data thieves who have real computer skills are relatively few. The vast majority are opportunists who take advantage of unsecure networks, forgotten cards, or weak passwords rather than executing elaborate hacks.

That is why staying secure matters: most attackers are not highly skilled, and an unprotected account or device is a prime target. If you're concerned about coverage options or how to protect your business, talk to an agent.

Frequently Asked Questions

How can I make my passwords more secure?

Use long, unique phrases or a reputable password manager, enable two-factor authentication, and avoid obvious choices like "123456".

Is public Wi‑Fi safe for banking or shopping?

Public Wi‑Fi can be risky; use a personal hotspot or a VPN when accessing sensitive accounts to reduce exposure.

What should I do if my credit card is stolen?

Report it to your card issuer immediately, review recent transactions, and consider a fraud alert or credit monitoring service.

How can businesses reduce the risk of opportunistic data theft?

Implement strong access controls, regular training, secure configuration of public systems, and incident response planning.

Need insurance for You, Your Family or Your Business?
We can match you to a qualified, local insurance expert!
Further Reading
Overview Movies make hackers look like lone geniuses in hoodies, but most data theft is opportunistic and low‑tech. Attackers profit by hitting poorly protected targets, using everything from mass website breaches to simple shoulder surfing at a caf...
Overview Retail businesses commonly handle large volumes of customer payment card data, which makes them a frequent target for cybercriminals. A loss of cardholder data or unauthorized access to customer information can lead to financial loss, regu...
Overview Retail operations face persistent threats from cybercriminals who seek payment card data and other customer information. Many breaches stem from point-of-sale compromises, weak network segmentation, or stolen credentials, and the impacts c...
There will always be a risk that something will go awry during construction projects. When something does go wrong, the result is usually costly time delays and additional material, labor, and damage costs. Most construction business owners view in...
Overview Website security is a critical part of protecting a small business. A compromised site can expose customer data, financial records, and employee information, and may create legal or reputational risk. This guide summarizes practical steps ...