Cybersecurity Awareness Month 2027 runs from Friday, October 1, to Sunday, October 31, 2027. Held every October since 2004, it is led in the US by the National Cybersecurity Alliance and the Cybersecurity and Infrastructure Security Agency (CISA), and it teaches simple habits that keep people and businesses safe online.
Europe, Canada, and Australia run their own October campaigns. This guide covers the dates, the theme, the four core habits, and other cyber dates in 2027.
Key takeaways
- Cybersecurity Awareness Month is October every year; in 2027, it runs from Friday, October 1, to Sunday, October 31.
- It began in October 2004 as National Cyber Security Awareness Month, launched by the National Cyber Security Alliance and the Department of Homeland Security.
- The four core habits are strong passwords with a password manager, multifactor authentication, spotting and reporting scams, and updating software.
- Americans reported a record $20.9 billion in cybercrime losses to the FBI in 2025, and phishing was the most reported crime.
Table of Contents
When is Cybersecurity Awareness Month 2027?
Cybersecurity Awareness Month 2027 is October 1–31, 2027. It starts on a Friday and ends on a Sunday, Halloween. It shares October with Breast Cancer Awareness Month and Hispanic Heritage Month, which ends October 15.
What is the Cybersecurity Awareness Month theme?
The 2027 theme has not been announced yet; it usually appears in late summer. The National Cybersecurity Alliance’s 2026 theme was “Don’t Make It Easy for Them,” which focused on everyday habits that make life harder for scammers (National Cybersecurity Alliance).
Recent themes include:
| Year | Theme | Set by |
|---|---|---|
| 2009 onward | Our Shared Responsibility | DHS and National Cyber Security Alliance |
| 2023 onward | Secure Our World (ongoing program) | CISA |
| 2025 | Building a Cyber Strong America | CISA |
| 2026 | Don’t Make It Easy for Them | National Cybersecurity Alliance |
Sources: Wikipedia, CISA, and the National Cybersecurity Alliance. We will add the 2027 theme once it is published.
How did Cybersecurity Awareness Month start?
The month began in October 2004 as National Cyber Security Awareness Month. The nonprofit National Cyber Security Alliance (now spelled National Cybersecurity Alliance) launched it with the Department of Homeland Security, and early advice included keeping antivirus programs up to date. Weekly themes were added in 2011.
After CISA was created within DHS in 2018, it became the campaign’s government co-lead, and the shorter name “Cybersecurity Awareness Month” is now standard. Presidents from five administrations have issued proclamations for the month (National Cybersecurity Alliance).
The four core cybersecurity habits
Both organizers build the month around four simple habits:
| Habit | What to do |
|---|---|
| Use strong passwords and a password manager | Make each password long and unique, and let a password manager store them. |
| Turn on multifactor authentication (MFA) | Add a second step, such as a code or an app prompt, to email, banking, and social accounts. |
| Recognize and report scams | Check the sender, don’t click unexpected links, and report phishing to your IT team or email provider. |
| Update your software | Turn on automatic updates for your phone, computer, browser, and apps. |
For businesses, CISA also recommends turning on system logging, backing up data, and encrypting sensitive information (CISA).
Cybercrime facts
| FBI Internet Crime Report, 2025 | Figure |
|---|---|
| Reported losses | About $20.9 billion, up 26% from 2024 |
| Complaints | More than 1 million |
| Most reported crime | Phishing or spoofing, 191,561 complaints |
| Costliest crime | Investment scams, $8.6 billion, including $7.2 billion tied to cryptocurrency |
Source: FBI Internet Crime Complaint Center, as reported by Help Net Security. Phishing tops the list, which is why “recognize and report scams” is one of the four habits.
Cyber awareness terms explained
Many October training courses use these terms. Here is what they mean:
| Term | Meaning |
|---|---|
| Phishing | A fake email or message that tricks you into clicking a link, sharing a password, or sending money |
| Spear phishing | Phishing aimed at one person or group, using personal details to look real |
| Whaling | Spear phishing aimed at senior leaders, such as executives |
| Smishing and vishing | Phishing by text message (SMS) and by voice call |
| Multifactor authentication | Signing in with two or more proofs, such as a password plus a code |
| Spillage | In government work, sensitive or classified information placed on a system not approved for it |
| Ransomware | Malware that locks your files and demands payment to unlock them |
Is the Cyber Awareness Challenge part of Cybersecurity Awareness Month?
No. The Cyber Awareness Challenge is the Department of Defense’s annual cybersecurity training course, which service members and DoD staff must complete every year, whatever the month.
It is separate from Cybersecurity Awareness Month, though both teach the same basic habits. For the course itself, sign in through your service’s official training site.
Cybersecurity Awareness Month around the world
| Country or region | Campaign | Month |
|---|---|---|
| United States | Cybersecurity Awareness Month (National Cybersecurity Alliance and CISA) | October |
| European Union | European Cybersecurity Month, coordinated by ENISA since 2012 | October |
| Canada | Cyber Security Awareness Month (Get Cyber Safe) | October |
| Australia | Cyber Security Awareness Month | October |
The 2026 European Cybersecurity Month, its 14th edition, focused on cybersecurity in the workplace (European Commission). France takes part through Cybermalveillance.gouv.fr, the government’s cyber assistance service.
Other cybersecurity dates in 2027
| Date | 2027 | Rule |
|---|---|---|
| Data Privacy Day | Thursday, January 28 | January 28 each year |
| World Password Day | Thursday, May 6 | First Thursday of May |
| Cybersecurity Awareness Month | October 1–31 | October each year |
| Cyber Monday | Monday, November 29 | Monday after Thanksgiving |
| Computer Security Day | Tuesday, November 30 | November 30 each year |
Scams rise around holiday shopping, so the Black Friday 2027 weekend is a good time to repeat the four habits.
Cybersecurity Awareness Month ideas
- Do a 15-minute account check: turn on MFA for email and banking, and update your phone.
- Set up a password manager for yourself or an older relative.
- Run a phishing quiz at work using real examples with personal details removed.
- Back up your photos and files to a second place.
- Share one habit a week on your team chat or school notice board.
Other observances in 2027 are listed in the Awareness Calendar 2027.
Cybersecurity Awareness Month dates 2026 to 2031
| Year | Dates |
|---|---|
| 2026 | Thursday, October 1 – Saturday, October 31 |
| 2027 | Friday, October 1 – Sunday, October 31 |
| 2028 | Sunday, October 1 – Tuesday, October 31 |
| 2029 | Monday, October 1 – Wednesday, October 31 |
| 2030 | Tuesday, October 1 – Thursday, October 31 |
| 2031 | Wednesday, October 1 – Friday, October 31 |
Frequently asked questions
When is Cybersecurity Awareness Month 2027?
Cybersecurity Awareness Month 2027 runs from Friday, October 1, to Sunday, October 31, 2027.
Is October Cybersecurity Awareness Month?
Yes. October is Cybersecurity Awareness Month in the US, Canada, Australia, and across the European Union.
Who runs Cybersecurity Awareness Month?
In the US, the National Cybersecurity Alliance and CISA co-lead it. In Europe, ENISA coordinates European Cybersecurity Month.
What is the 2027 Cybersecurity Awareness Month theme?
It has not been announced yet. The 2026 theme from the National Cybersecurity Alliance was “Don’t Make It Easy for Them.”
What are the four core cybersecurity habits?
Use strong passwords and a password manager, turn on multifactor authentication, recognize and report scams, and update your software.
When did Cybersecurity Awareness Month start?
It started in October 2004 as National Cyber Security Awareness Month, launched by the National Cyber Security Alliance and the Department of Homeland Security.
