Tired brains take the phishing bait – UC Irvine News | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

Researchers find that even a minor reduction in sleep caused by the transition to daylight saving time led to a sizable increase in the risk of falling prey to email phishing attacks.

Although the study focused on cybersecurity, the results imply that many of our day-to-day decisions are likely compromised in similar ways by insufficient sleep.

Irvine, Calif., Nov. 9, 2026 — Nearly a third of adults in the U.S. do not get enough sleep. A recent surge in attention to this issue has raised serious concerns about the long-term health implications, and new research suggests that it can have hazardous outcomes, especially in the context of cybersecurity.

University of California, Irvine neurobiologists studied people’s reactions earlier this year to the transition to daylight saving time. As we all “spring forward,” we lose one hour of sleep. The researchers discovered that even this minor reduction in shut-eye led to a sizable increase in the risk of falling prey to phishing emails. Their findings appear this week in Proceedings of the National Academy of Sciences.

To test the effects of this modest loss of sleep, the scientists leveraged a cybersecurity awareness campaign for more than 11,000 employees of a large U.S. institution. Every few months, the organization’s information technology group sends emails that resemble those used in phishing to see how many recipients click on the links included. It’s part of an ongoing effort to educate personnel about the risks of digital attacks, damage or unauthorized access to data.

Hazardous implications for decision-making

The results showed that on the Monday after the time transition, employees were 13 percent more likely to fall for the phony phishing attempts than on the previous Monday (a click rate of 17.76 percent vs. 15.56 percent). This suggests that even a slight loss of sleep has real-life ramifications for decision-making.

Estimated financial losses from cybercrimes in the U.S. alone exceeded $20 billion last year, according to the FBI Internet Crime Complaint Center’s 2025 annual report, and an increase in risk has direct monetary implications for companies and individuals.

“There are several ways to contextualize our findings,” said Eitan Schechtman, assistant professor of neurobiology and behavior at UC Irvine and the study’s lead researcher. “First, they give us a peek into the effects of very minor sleep loss such as that incurred due to the transition to daylight saving time, which is comparable in scope to the kind of sleep loss many of us experience daily. Although we focused on cybersecurity, many of our day-to-day decisions are probably compromised in similar ways. Better sleep likely leads to better decisions.”

“Although we focused on cybersecurity, many of our day-to-day decisions are probably compromised in similar ways. Better sleep likely leads to better decisions,” says Eitan Schechtman, assistant professor of neurobiology and behavior at UC Irvine and the study’s lead researcher. UC Irvine

Alignment with our internal clock

Beyond the general impact of sleep loss, the results also inform discussions about the biannual time changes common in most states. The U.S. House of Representatives recently passed the Sunshine Protection Act, which would make daylight saving time permanent throughout the country. Although a permanent clock would avoid the transition that leads to sleep loss, according to the researchers, scientific data strongly suggest that standard time better aligns with our internal clock, and scientists have encouraged Congress to adopt it as permanent.

Regardless of the current debate, the study’s findings emphasize that if these clock shifts continue, precautions should be taken to mitigate the risks.

“I hope that cybersecurity companies and employers will take action ahead of the daylight-saving-time transition, as well as other times during which sleep is compromised, such as following holidays or major sports events,” Schechtman said.

Although the research has commercial and financial implications for society at large, it also has important ramifications at the individual level.

“You don’t have to be a great sleeper to prioritize sleep,” Schechtman said. “For too many of us, sleep is an inconvenience, with some even taking pride in how little they sleep each night. Our results demonstrate that even though you may not be aware of it, lack of sleep leads to impulsive choices, and you may lose more than you gain from putting sleep on the back burner.”

About the University of California, Irvine: Founded in 1965, UC Irvine is a member of the prestigious Association of American Universities and is ranked among the nation’s top 10 public universities by U.S. News & World Report and the top 100 in the world by Times Higher Education. The campus has produced five Nobel laureates and is known for its academic achievement, premier research, innovation and anteater mascot. Led by Chancellor Howard Gillman, UC Irvine has more than 36,000 students and offers 224 degree programs. It’s located in one of the world’s safest and most economically vibrant communities and is Orange County’s second-largest employer, contributing $7 billion annually to the local economy and $8 billion statewide. For more on UC Irvine, visit www.uci.edu.

——————————————————-
Click Here For The Original Source.