News
North Carolina Declares Cybersecurity Awareness Month Amid Rising Online Threats
Source: governor.nc.gov
Published on October 18, 2025
Updated on October 18, 2025
North Carolina Declares Cybersecurity Awareness Month
North Carolina Governor Josh Stein has officially declared October as Cybersecurity Awareness Month, aiming to address the growing threat of cybercrime in the state. The announcement comes as North Carolinians face increasing risks, with over $324 million lost to internet scams in 2024, according to the FBI. This initiative seeks to educate residents and businesses on protecting themselves against evolving digital threats.
The proclamation underscores the urgent need for heightened vigilance as cyber threats become more sophisticated. N.C. Department of Information Technology (NCDIT) Secretary Teena Piccione highlighted the importance of understanding how to navigate the digital landscape safely, especially with the rise of generative AI and other emerging technologies. Cyber threats pose significant financial and personal risks to individuals and the state's economy.
Key Strategies for Online Safety
The state is promoting several key strategies to enhance online safety. These include using strong, unique passwords managed by a password manager and enabling multi-factor authentication, which can reduce hacking risks by 99%. Keeping devices and software updated is also crucial, as updates often include security patches that address known vulnerabilities. Governor Stein's administration emphasizes caution when clicking links, a common vector for phishing scams.
For those traveling or using public Wi-Fi, extra precautions are advised. Avoiding public charging stations and using a Virtual Private Network (VPN) to encrypt data when on public Wi-Fi networks is recommended. The state also warns against sharing personal or financial information with publicly available artificial intelligence platforms, as this data can be exploited for malicious purposes.
NCDIT's Five-Year Cybersecurity Plan
The NCDIT is implementing a five-year strategic plan to strengthen North Carolina's cybersecurity defenses. This plan focuses on stronger governance, expanded partnerships across government, education, and the private sector, and modernizing the state's cybersecurity workforce. Initiatives like a new cybersecurity internship program aim to build a robust talent pipeline to address future challenges.
Beyond Awareness: The Need for Lasting Change
While Cybersecurity Awareness Month is a strong starting point, the initiative's success depends on translating awareness into lasting behavioral changes. Residents and businesses must understand the practical importance of cybersecurity measures, such as using strong passwords and enabling multi-factor authentication. The increasing sophistication of AI-driven scams further underscores the need for a more critical approach to online interactions.
The rise of generative AI has introduced new risks, as scammers can now create highly realistic video and audio communications. This makes it harder for individuals to distinguish between genuine and fraudulent interactions, requiring a shift towards greater skepticism and caution online.
Resources for North Carolinians
To help residents navigate the digital world, NCDIT's Division of Broadband and Digital Opportunity has launched the Tech Resource Finder, a website offering access to over 2,100 resources. These include technical support and digital skills classes. Additionally, residents can call NC 211 for assistance, including digital skills assessments and guidance on accessing computer skills classes. This effort reflects the state's commitment to helping all North Carolinians develop the skills needed to stay safe online.
A Model for Other States
North Carolina's approach to Cybersecurity Awareness Month serves as a model for other states facing similar challenges. By combining awareness campaigns with strategic investments in cybersecurity infrastructure and workforce development, the state is taking a proactive stance against digital threats. The key takeaway is that cybersecurity is a shared responsibility, requiring proactive measures from individuals, businesses, and government agencies alike. Ignoring the problem is no longer an option, as the financial and personal costs are simply too high.