Skip to content
ADVERTISEMENT

Employee social media oversharing puts businesses at risk, expert warns

John Pepper, CEO and founder at Managed247, said: “Employees can unintentionally give criminals a lot of useful information about themselves and the people they work with."

Close up, business woman using mobile phone at modern office. Businesswoman hand holding smartphone, surfing the internet, social media networking with copy space
ADVERTISEMENT

More than 80% of employees overshare on social media, potentially exposing themselves and their employers to cyber threats, according to research highlighted by Managed247.

The IT services provider warned that information shared through employees’ personal accounts could help criminals understand an organisation and create more convincing targeted scams.

John Pepper, CEO and founder at Managed247, said: “Employees can unintentionally give criminals a lot of useful information about themselves and the people they work with.

“When those details are brought together, it can make it much easier for someone to convincingly impersonate a colleague or senior member of staff.

“Businesses should think about employees’ digital footprints as part of their wider cybersecurity strategy and make sure staff understand what information could potentially be useful to someone outside the organisation.”

ADVERTISEMENT

More than 220,000 fraud-risk cases were recorded on the UK National Fraud Database during the first half of 2026, according to Cifas, with identity fraud accounting for 59% of cases.

Managed247 said publicly available details including employees’ names, job titles, colleagues, clients and professional responsibilities could be used to impersonate staff or senior leaders and make fraudulent requests.

Social media posts about new roles, projects or business relationships could also provide information for social engineering attacks designed to appear as though they have come from a legitimate colleague, customer or supplier.

ADVERTISEMENT

Pepper said: “Social engineering works because criminals are trying to make their messages feel familiar and trustworthy. The more information they can find about an organisation and its employees, the easier that becomes.

“If an employee receives an unusual request involving money, confidential information or access to a system, it’s always worth checking through another trusted channel before taking action.”

ADVERTISEMENT

He also warned of reputational risks when employees’ personal social media accounts can be associated with their employer.

ADVERTISEMENT

Pepper added: “Employees don’t necessarily need to share confidential documents to reveal useful information about a business. Sometimes it can be the small details that add up.

“A photo from the office, a post about a new client or even an update about an upcoming project could give someone outside the organisation a better understanding of how that business operates.

“It’s about encouraging employees to take a second before posting and think about whether there’s anything in the background or in the caption that they wouldn’t want a stranger to know.”