National Social Engineering Day 2026
National Social Engineering Day on August 6 is a practical pause to notice how scams talk you into helping: a rushed text, a fake “IT desk,” a QR code on a parking meter. The day is for checklists, not panic.
About National Social Engineering Day
History & origins
KnowBe4 and National Day Calendar established National Social Engineering Day in 2024, to be observed each year on August 6. National Day Calendar says the Registrar approved the day in 2024. August 6 is the birthday of Kevin Mitnick (born 1963; died July 2023), the well-known security educator and former KnowBe4 Chief Hacking Officer whose public story centered on social engineering — manipulating people, not only breaking software. KnowBe4’s inaugural 2024 materials framed the date as awareness of those human-targeted tactics.
National Day Calendar states that hackers leverage social engineering in an estimated 90% of cyberattacks. Treat that figure as an industry estimate from NDC/KnowBe4 materials, not as a new statistic invented here. (KnowBe4’s own press language has also used a higher “estimated 98%” figure; estimates vary by source and definition.) The day is informal. It is not a U.S. federal holiday.
Social engineering includes phishing (fake email or texts), pretexting (a made-up story and role), baiting, and newer twists such as quishing — malicious QR codes. Attackers often impersonate delivery firms, banks, or a workplace IT desk and add time pressure. The useful response is slower verification: a known phone number, a second channel, a pause. This page does not include attack how-tos.
Why it matters
Most people will never “hack a server.” Plenty will tap a link that looks like a delivery notice. A calm annual reminder is more honest than a horror headline: scams work on busy, helpful people. Families and small teams can rehearse a few habits without turning relatives into suspects.
How to celebrate
Hover or long-press links before you tap; if a message is urgent about money, call a known number from your contacts, not the number in the message. Turn on multi-factor authentication where you can. Use a password manager. Treat unexpected QR codes on parking meters, posters, and restaurant tables as untrusted until you confirm the real payee. Agree on a family code word for emergency money requests. Check invoice bank details against a previous bill, not a new email. Report phishing to your email provider and, at work, to IT. Review privacy settings on the two apps you use most. Read a short, reputable explainer on pretexting. Do not practice attacks on anyone, and do not share “how to phish” steps — the day is defensive.
Facts
- KnowBe4 and National Day Calendar established the day in 2024 on a fixed date: August 6
- August 6 is the birthday of the late Kevin Mitnick, whose public teaching focused on social engineering
- National Day Calendar cites social engineering in an estimated 90% of cyberattacks (an industry estimate from those sources)
- Common tactics include phishing, pretexting, and malicious QR codes (quishing)
- The observance is informal: it is not a federal holiday
Upcoming dates
- Thursday, August 6, 2026
- Friday, August 6, 2027
- Sunday, August 6, 2028
- Monday, August 6, 2029
- Tuesday, August 6, 2030
Frequently asked questions
When is National Social Engineering Day in 2026?
National Social Engineering Day in 2026 falls on Thursday, August 6, 2026.
Is today National Social Engineering Day?
No. National Social Engineering Day in 2026 falls on Thursday, August 6, 2026, not today.
What is social engineering?
It is tricking a person into giving access, money, or information — for example with phishing messages, a fake story, or a malicious QR code — rather than only breaking a system technically.
Who started National Social Engineering Day?
KnowBe4 established it with National Day Calendar’s approval in 2024, on Kevin Mitnick’s birthday.
Is it true that 90% of cyberattacks use social engineering?
National Day Calendar uses an estimated 90% figure; KnowBe4 has published other high estimates. Treat them as industry estimates, not a single official global statistic.
How do I mark the day without fearmongering?
Run a personal checklist: verify urgent requests, enable multi-factor authentication, be wary of surprise QR codes, and teach family members to slow down. Skip attack how-tos.
Share
Help others discover this day by sharing it.