When you bring someone new into the business, your first thought is usually about getting them set up: a laptop, an email account, access to the right systems, and a warm welcome from the team.
But here’s something many business owners don’t realise – the first few months of a new hire’s journey are one of the riskiest times for your cyber security.
And it’s a risk that often goes unnoticed.
According to new research, 71% of new starters fall for phishing or social engineering attacks within their first 90 days.
That’s no coincidence. Cyber criminals deliberately target new employees — and too often, they succeed.
Why new hires are prime targets
Think about what it’s like to start a new job. You’re eager to impress, still learning the ropes, and trying to follow instructions carefully.
Hackers know this. They exploit that uncertainty with carefully crafted scams that look like they’ve come from HR, the boss, or even IT support.
It might be:
- A fake HR portal asking for login details
- A bogus invoice marked “urgent”
- An email pretending to be from a senior manager asking for sensitive information or a quick favour
Because new hires don’t yet know who’s who or what’s “normal”, they’re far more likely to fall for it. In fact, research shows they’re 44% more likely to click on malicious links than longer-serving staff.
And when attackers pretend to be company executives? New employees are 45% more likely to be tricked.
That’s a big gap – and it highlights just how vulnerable your business can be during onboarding.
The fix: security from day one
The solution isn’t complicated. It’s about recognising that cyber security training shouldn’t wait until someone’s “settled in.”
Those early days are exactly when they need clear, practical guidance on:
- How phishing works
- What red flags to look out for
- What to do if something doesn’t feel right
The businesses that take this seriously see huge improvements. The same report found that companies offering tailored security training and phishing simulations for new staff cut their risk by 30% after onboarding.
That’s a big win for a relatively small investment of time and effort.
Of course, good security software and firewalls are still essential. But people are always your first line of defence. And right now, your newest people might just be your weakest link… unless you give them the knowledge and tools to protect your business from day one.
If you’d like help setting up simple, effective cyber security training for new starters – or want to strengthen your overall security – get in touch.
