What Is Social Engineering? Definition, Tactics & How to Prevent It
Brief
Social engineering is the practice of manipulating people, rather than hacking systems, into giving up confidential information, access, or money. Instead of breaking through a firewall, an attacker convinces an employee to hand over a password, click a malicious link, or approve a fraudulent wire transfer, often by impersonating someone the victim already trusts.
It works because it targets a weakness no software patch can fix: human judgment under pressure. According to Verizon’s 2025 Data Breach Investigations Report, the human element, including social engineering, user error, and misused credentials, is a factor in roughly 60% of all data breaches, making it one of the most consistently exploited entry points in cybersecurity, year after year.
A social engineer doesn’t need advanced technical skills to succeed.