Hacking is a Phase: Study Finds 96% of Youth Digital Crime Fades By Age 20
The Dutch authorities have released new data indicating that adolescents’ involvement in digital wrongdoing is typically fleeting. An analysis prepared for the House of Representatives reveals that early enthusiasm for hacking usually fades by the age of twenty, with only a small minority retaining a lasting interest.
The report underscores that teenagers tend to experiment with various forms of illicit behaviour at roughly the same stage of life. Digital offences occur no more frequently than incidents involving weapons or narcotics, and significantly less often than property-related crimes. The first steps into such activities commonly begin with gaming simulations that allow young people to develop technical skills.
According to datasets collected over different years, the peak in activity among young offenders ranges from seventeen to twenty. This pattern mirrors trends seen across other forms of criminal behaviour. One study conducted in 2013 on several hundred young offenders found that most participants abandoned such activities soon after reaching their peak.
Only about four percent continue engaging in digital crime after the age of twenty. Researcher Alice Hutchings noted as early as 2016 that long-term involvement tends to grow from a sustained fascination with technology and a desire to refine one’s skills, rather than from external incentives.
Government analysts caution that much of the available research quickly becomes outdated due to the rapid evolution of the digital environment. For comparison, they cite the estimated total social cost of youth crime — roughly €10.3 billion per year. Most of this burden falls on victims, with the remainder distributed across public services, including the police and the judicial system.
Accurately assessing the annual cost of digital offences alone is difficult because of insufficient long-term monitoring. Nevertheless, indirect data help illustrate the scale of the problem. A study commissioned by the UK government found that the financial impact of just three cyberattacks on a major hospital could exceed £11 million annually. Such sums are comparable to, or greater than, the losses attributed to many categories of crime in the Netherlands.
Dutch government agencies have repeatedly stressed that the impact of digital attacks is hard to quantify precisely. For instance, a Deloitte report prepared for the authorities in 2016 estimated the yearly losses suffered by organisations due to cyber incidents at around €10 billion — an amount on par with the overall damage caused by youth crime.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.