Beyond the Workplace: Protecting the Household
The paper explains that attackers now bypass enterprise defenses by exploiting employees' family and household data, making household exposure a critical security risk. It argues that protecting the workforce, and the enterprise, requires extending security controls beyond employees to their families.
Inside the report
What you'll learn
For organizations that understand protection doesn't end at the office door.
01
Attackers bypass enterprise defenses through the household
Modern adversaries rarely attack enterprise systems directly. They exploit spouse social media, children's publicly linked phone numbers, and family home addresses to reach their targets.
02
Household exposure is quantifiable at scale
The FBI IC3 recorded 859,000+ cybercrime complaints in 2024 with $16.6B in losses, the highest on record, largely driven by phishing, spoofing, and BEC schemes that exploit personal and household data.
03
Family members are the unprotected perimeter
Teenagers with publicly linked contact information, parents targeted by impersonation scams, and spouses with visible online profiles represent attack surfaces entirely outside enterprise controls.
04
Household protection is a core security control
For organizations responsible for executives, engineers, and critical operators, household privacy protection belongs on par with MFA and endpoint protection, not treated as an optional benefit.
Key takeaways
- 01
The security perimeter no longer ends at the enterprise, it extends to the homes and families of employees and leadership.
- 02
Household data exposure is a primary vector for social engineering, business email compromise, and impersonation attacks.
- 03
In 2024, fraud schemes exploiting personal data drove the highest cybercrime losses ever recorded by the FBI.
- 04
Household privacy protection is no longer a benefit, it is a core security control.
Risk framework
Executive
Principal exposure surface
Risk vectors
Data brokers
Public records
Social exposure
Family vectors
Enterprise risk
Institutional impact
M&A, capital events, reputation