Rarely a week or two go by without reports of a security breach or data attack at a high-profile organization, whether it’s U.S. government computers or servers at marital cheating Website Ashley Madison. Wherever the attack, the result is the same: Millions of names, passwords and other personal data get out in the wild, endangering everything from privacy to finances to reputations. The reports are hard to miss, which makes the results of a recent survey commissioned by Citrix Systems so interesting. A study by Wakefield Research for Citrix and released last month found that U.S. workers are aware of threats to security and data and are feeling vulnerable. However, many fail to take basic security steps to protect their data—such as not making their passwords stronger or keeping their security software updated—and some are not confident their companies are focused enough on the issue. One good piece of good news: Most workers said they would not open email from an unknown or untrusted source. This eWEEK slide show takes a look at some of the key findings from Citrix’s survey of more than 1,000 U.S. workers.