Hybrid work drives surge in device theft & visual hacks

Kensington has published research that links hybrid work patterns with higher rates of device theft and argues that physical controls remain a weak spot in corporate security programmes.

The company said organisations continue to spend heavily on digital security tools such as firewalls, encryption and endpoint monitoring. It said attackers still gain access through unsecured laptops and other devices in offices, shared spaces and during travel.

Kensington's survey found that 76% of organisations experienced device theft in the last two years. The figure rose to 85% among organisations operating hybrid environments.

The research also highlighted wider operational and compliance impacts. Kensington said 33% of organisations faced legal or regulatory consequences after device theft. It said 32% reported productivity loss because of stolen devices.

Kensington set those figures against the cost of breach response. It cited an average global cost of a data breach of USD $4.88 million in 2024. It compared that with an average device lock cost of less than USD $40.

Endpoint focus

Kensington positioned device security as part of endpoint risk management rather than a facilities issue. It said physical access remains a straightforward route around digital controls in decentralised work models.

Louie Yao, Director of Global Product Development at Kensington, said teams should expand how they define high-risk endpoints. "Cybersecurity teams know that the endpoint is where risk concentrates, yet physical access remains one of the most common ways attackers bypass digital controls," said Yao.

"As hybrid work expands, an unsecured laptop is effectively an open door. The research shows organisations can dramatically reduce breach likelihood with simple physical controls, and at a fraction of the cost of a single incident," said Yao.

Kensington's findings also pointed to "visual hacking" in public and shared environments. It said nearly 23% of surveyed IT leaders identify visual hacking as a growing threat. The company linked the risk to professionals working in transport hubs, meeting lounges and coworking spaces.

Visual risks

Kensington said the spread of mobile work has increased the amount of sensitive data displayed outside controlled office settings. It said this trend increases exposure to opportunistic viewing of screens.

Arivan Ahmad, Kensington Australia Product Manager, described the conditions that raise the risk in day-to-day work. "Digitisation has increased the amount of sensitive information displayed on screens every day. As work becomes more mobile, the risks of 'shoulder surfing', where someone simply glances at your screen, have grown significantly. Airports, cafés, coworking spaces and even shared office setups create ideal conditions for visual hacking."

"Many organisations still underestimate how easily visual data can be harvested. In highly regulated industries like government, healthcare and financial services, privacy screens are now becoming essential day-to-day security tools, not optional accessories," said Ahmad.

Kensington said its privacy screens narrow the viewing angle and restrict visibility to the user. It said the approach reduces the exposure of on-screen information to people nearby.

Locks and layers

The research included metrics on the perceived effectiveness of physical locks and related tools. Kensington said organisations that use device locks are 37% less likely to experience data breaches caused by unsecured devices.

Kensington said 84% of IT decision makers view physical security locks as a cost-effective mitigation tool. It said 97% agree that physical locks significantly reduce unauthorised access and theft.

Kensington framed the issue as part of a defence-in-depth approach. It said organisations should combine multiple safeguards at device level rather than rely on software alone.

"Cybersecurity is no longer just about software hardening, it's about securing the entire attack surface, including the physical one. When organisations combine digital authentication, encryption and physical locking mechanisms, they establish a layered defence that can meaningfully reduce exposure," said Yao.

Ahmad said demand for physical security products has increased as organisations review hybrid working policies and device use outside the office. "Any employee working with commercially or personally sensitive information benefits from tools like privacy screens and device locks. We're seeing the strongest adoption in government, healthcare and banking because the cost of a privacy breach in those sectors is significantly higher than the cost of prevention," he said.

"For many cybersecurity leaders, the value equation is clear. Low-cost physical controls can eliminate high-impact exposures, whether that's preventing stolen devices, visual hacking or unauthorised access during mobile work," said Ahmad.