A new Bankrate report found that 41 million adults in the United States have had their identities stolen — while another 49 million know someone who has.

The report also found that many people put “themselves in harm’s way by engaging in risky behaviors.”

Close

Among those risky behaviors:

  • 42 percent do not regularly check their credit reports
  • 36 percent conduct banking and other sensitive business on unsecured WiFi networks that don’t require a password
  • 28 percent say their online account passwords are all or mostly the same — and 18- to 25-year-olds are the worst offenders of this. Roughly half of them use the same password all or most of the time, something security experts say you should not do.

“About two in five Americans have either been an identity theft victim or know someone who has,” said Bankrate.com analyst Mike Cetera in a release. “This is a widespread problem and many people aren’t doing enough to protect themselves.”

Related: IRS Lets Illegal Immigrants Steal Identities

The survey was done for Bankrate, a personal finance site, by Princeton Survey Research Associates International, using phone interviews with a nationally representative sample of 1,000 adults living in the continental United States.