Legal professionals in the UK beware: Despite widespread confidence in data security, cybersecurity awareness and best practices are far from the established in the country, according to a recent survey of 2,000 UK consumers and employees.

ISACA’s 2016 Cyber Security Perceptions found that while 79 percent of UK office employees and consumers were confident in their ability to protect their own sensitive data and 74 percent were confident in their employers’ ability to do so as well, over one-third (36 percent) could not identify a phishing attack. In addition, one in five said they were victims of phishing emails.