Peer-Review Report by Holger Mühlan (Reviewer AD): https://med.jmirx.org/2026/1/e91383
Authors' Response to Peer-Review Reports: https://med.jmirx.org/2026/1/e91437
Abstract
Background: The IT sector is growing and encompasses all professions, from leisure and recreation to hospitals and emergency response groups. IT professionals are experiencing increased threats (eg, ransomware attacks), but little is known about the relationship between these IT profession–specific stressors and the professionals’ mental health.
Objective: This study aimed to (1) estimate the associations between IT profession–specific stressors and anxiety, depression, and stress, and (2) examine the role of mental health literacy (MHL) as a mediator of the relationship between depression, anxiety, stress, and help-seeking.
Methods: Between February and May 2023, IT professionals working in the United States were surveyed online. Participants (n=357) reported demographic characteristics, MHL, mental health symptoms, and help-seeking intentions with the following scales: Mental Health Literacy in the Workplace (MHL-W), Center for Epidemiological Studies Depression-10 (CESD-10), Generalized Anxiety Disorder-7 (GAD-7), Perceived Stress Scale-10 (PSS-10), and the Mental Help Seeking Intention Scale (MHSIS). Descriptive statistics, regression models, and mediation analyses were conducted for CESD-10, GAD-7, and PSS-10.
Results: Respondents who had experienced ransomware attacks in the past year reported significantly higher symptoms of depression (odds ratio [OR] 1.85, 95% CI 1.07-3.22; P=.03). Past-year exposure to balancing security and usability was associated with lower odds of reported anxiety (OR 0.48, 95% CI 0.28-0.82; P=.008). Having made critical technology decisions with limited information in the past year was associated with higher perceived stress by 2.02 points on the PSS-10 scale (SE 0.84, 95% CI 0.37-3.66; P=.02), and working with limited resources in the past year increased perceived stress by 1.70 points (SE 0.84, 95% CI 0.04-3.35; P=.04) after adjusting for the covariates. MHL was found to partially mediate the relationship between depression and help-seeking, but not between anxiety or stress and help-seeking.
Conclusions: These findings provide insight into the workplace stressors that pose a greater psychological health risk for IT professionals. These results emphasize the important role of MHL in helping facilitate the connection between depressive symptoms and help-seeking.
doi:10.2196/73211
Keywords
Introduction
Established in the 1950s, IT is defined as the “use of computer systems or devices to access information” for both business and personal operations, such as “storing, retrieving, accessing or manipulating information” []. The efforts of IT workers to maintain business devices can sometimes involve high-stress exposures such as viewing illicit content and mitigating ransomware attacks []. Technologies have become persistent targets for hackers and cybercriminals who seek vulnerabilities in networks []. Ensuring the safekeeping of technology means that some IT professionals are in a constant state of high alert. The high levels of stress experienced by IT workers are reflected in the findings from a recent assessment of challenges and stressors in the information security sector. According to the 2022‐2023 Chartered Institute of Information Security report, 22% of 302 UK respondents reported working more than 48 hours per week, with 8% working more than 55 hours weekly []. Furthermore, 32% reported they were kept awake by worries of a potential cyber-attack on their organization, up from 22% in 2022 []. Over two-thirds of the survey respondents believed there would be an increase in the frequency and impact of ransomware attacks [].
The existing literature on mental health in IT has largely focused on IT professionals working in Asia [,] and Europe [,]. Following a ransomware attack, Northwave, a security company based in the Netherlands, conducted a study with 21 members of its own computer emergency response team employees and found that mental health can be significantly affected by ransomware attacks []. While the Northwave study suggested an elevated risk of mental health issues among IT professionals, another study using the UK Biobank cohort study did not yield similar findings []. This was the first UK-based longitudinal study (running from 2006 to 2010); it compared the incidence of anxiety and depression between IT and non-IT employees aged 40 years or older found that IT professionals had a reduced risk of anxiety and depression compared to their non-IT counterparts []. To the best of our knowledge, no such report exists for the IT sector in the United States.
Considering the IT professionals who report experiencing symptoms of depression, anxiety, and stress, an important next step is to determine whether these individuals possess a firm knowledge base on mental health and whether they intend to seek help. Mental health literacy (MHL) refers to the knowledge and ability to recognize and identify symptoms related to mental health for preventing mental illness as well as maintaining and promoting mental health []. Previous research has found a positive correlation between MHL and mental health attitudes [,], and young adults with more favorable attitudes toward mental health services are more likely to seek help [].
Past studies have not assessed MHL, mental health attitudes, or intention to seek help among IT workers in the United States. Additionally, previous studies have not considered important factors such as exposure to illicit content, ransomware attacks, hacking, and takedowns, which may contribute to the elevated symptoms of depression, anxiety, and stress experienced by IT professionals. A recently published occasional paper from the United Kingdom examined first-order harms of ransomware on staff and identified the stress reported by incident responders following the incident []. First-order harms are “harms to any organization and their staff directly targeted by a ransomware incident” []. There is an urgent need for evidence-based resources and information concerning mental health in the IT workforce community, a domain that remains under-studied, especially in the US context. Therefore, this study aimed to (1) test the relationship between IT profession–specific stressors and anxiety, depression, and stress and (2) analyze the role of MHL as a mediator for the 3 selected mental health conditions (anxiety, depression, and stress) and help-seeking behaviors.
Methods
Participants and Data Collection
Data for this study were collected between February and May 2023 via an online survey using Qualtrics []. The online open survey was developed with previously validated scales described in detail in the Measures section below. For this convenience sample, 2336 participants were identified via known contacts, SurveyCircle [], and Prolific []. The three eligibility criteria for the survey were (1) being aged at least 18 years, (2) working in the IT sector in the United States, and (3) having at least 12 months of any IT work experience. Electronic written voluntary consent was recorded for all survey respondents at the start of the survey. Duplicate entries were avoided by limiting access to the survey to a single attempt. Of the original 483 responses recorded, 23 observations were excluded because of either discontinuing the survey prior to providing consent, being ineligible, or being a bot entry. Review of the data showed no evidence of conspicuous response behavior. Nevertheless, outliers in average completion time of the survey, such as those showing that the survey was completed in only a few minutes, were excluded. A total of 388 (84.3%) of the remaining 460 participants who provided consent and whose responses were determined to be valid completed the survey. The final sample following complete case handling of missing data is described below in the Data Analysis section.
Ethical Considerations
The consent form included pertinent information, such as the estimated duration of the survey, the fact that personally identifiable information would not be collected, and the purpose of the study. After respondents completed the 10-to-15-minute survey, they were given the option to take part in a drawing for one of four US $75 Target e-gift cards. To ensure anonymity in the survey responses, respondents were guided to a separate Qualtrics survey where they could provide an email address for the random drawing. This study received approval as an exempt study by the Indiana University Bloomington Human Subjects and Institutional Review Board (protocol 18281).
Measures
Assessment of Mental Health Status
Symptoms of depression were assessed with the 10-item Center for Epidemiologic Studies Depression (CESD-10) questionnaire [,]. The CESD-10 helps identify individuals at risk of developing clinical depression and has been previously validated against the original 20-item CESD questionnaire [] designed for screening the general population [,,]. CESD-10 scores range between 0 and 30; scores below 10 are recoded to 0 (“no significant symptoms of depression”) and scores 10 and above are recoded to 1 (“significant symptoms of depression”) creating a binary variable for depression.
Meanwhile, the 7-item Generalized Anxiety Disorder Scale (GAD-7) was used to screen for symptoms of anxiety among the respondents []. Responses to the 7 questions were summed for a final score ranging from 0 to 21. For descriptive purposes, 3 cutoff points were used (5, 10, and 15; 0‐4=minimal anxiety, 5‐9=mild anxiety, 10‐14=moderate anxiety, and 15‐21=severe anxiety) to show the different categorical levels of severity. However, the optimal cutoff score for screening anxiety via the GAD-7 scale is 10 [,]. Therefore, scores 10 and above were coded as 1 (“yes”) for anxiety and below 10 were coded as 0 (“no/minimal”) for level of anxiety.
Unlike the anxiety and depression scales, the 10-item Perceived Stress Scale (PSS-10) does not translate to clinical significance; therefore, categorizing scores into groups is done only for descriptive purposes, and for the analyses the scores were included as a continuous variable []. Final scores ranged between 0 and 40. For descriptive purposes, scores 0 to 13 were coded as “low stress,” 14 to 26 as “moderate stress,” and scores 27 to 40 as “high stress.” Increased perceived stress is reflected by higher scores.
IT Profession–Specific Stressors
For research question 1, we identified 12 past-year IT profession–specific stressors based on the feedback solicited from 2 IT professionals with a combined 35 years of IT experience. IT experts were selected based on predefined criteria, including their professional qualifications and practical experience. Interviews were conducted with the IT experts, allowing for the development of a comprehensive list of stressors. The list of the 12 stressors curated by the IT professionals was as follows: (1) ransomware attacks, (2) exposure to illicit content, (3) takedowns, (4) handling sensitive data and cybersecurity threats, (5) making critical technology decisions with limited information, 6) adapting to rapid changes in technology and business requirements, (7) pressure to solve complex technical issues, (8) the constant need to stay up to date with technology, (9) dealing with unexpected system failures and outages, (10) dealing with leadership that does not wish to invest in or be inconvenienced by cybersecurity initiatives, (11) balancing security and usability, and (12) working with limited resources (eg, budget and personnel).
Respondents were asked a single question: “Which of the following on-the-job stressors have you experienced in the past year?” and selected all that applied from the list of stressors provided. The 12 stressors were measured individually as binary variables (yes/no), and a separate count variable was created to identify the total number of the 12 stressors experienced by each respondent (scores ranged from 0 to 12).
Mental Health Help-Seeking Intentions
For research question 2, the primary outcome was mental health help-seeking intentions, which were measured using the Mental Help Seeking Intention Scale (MHSIS) []. Final MHSIS scores ranged between 1 and 7. Higher scores indicate greater intention to seek help from a mental health professional [].
Mental Health Literacy in the Workplace
The Mental Health Literacy Tool for the Workplace (MHL-W) comprises 4 vignettes depicting a hypothetical coworker’s behavior in the workplace; each vignette has 4 questions measuring 4 distinct MHL concepts []. The following 4 variables were rated on a scale from 1 (very low) to 5 (very high): (1) level of knowledge in being able to recognize a specific disorder (“What might be happening with [him/her]),” (2) level of knowledge and beliefs regarding risk factors and prevention (“How you could prevent the situation from becoming worse”), (3) level of knowledge and attitudes about help-seeking (“What you should say or do in the situation”), and (4) level of knowledge and beliefs regarding interventions (“Resources or services that might be helpful”). The values for all 16 questions were summed up for a final MHL-W score, with possible scores ranging from 16 to 80. Higher scores indicate a greater self-reported knowledge of mental health.
Demographics
Demographic data were collected on the following characteristics: age, race (Black or African American, American Indian or Alaska Native, Asian or Asian American, Native Hawaiian or other Pacific Islander, White, and other), ethnicity, sex at birth (female vs male), relationship status, education, and income-level groups. Data regarding health-related characteristics included questions about health insurance and mental health history.
Covariates
Covariates included age, sex, race, ethnicity, education, income, health insurance, and mental health history.
Data Analysis
Descriptive statistics, means and SD for continuous variables, and frequencies and percentages for categorical variables were computed by respondent sex at birth. A 2-sided P value of less than .05 was considered significant. A complete case analysis was performed, excluding participants with any missing data for key variables. Of the 388 participants, 17 (4%) were missing data for age, 1 (<1%) for race, 4 (1%) for ethnicity, 1 (<1%) for education, 2 (<1%) for health insurance, 5 (1%) for CESD-10, 1 (<1%) for GAD-7, 13 (3%) for PSS-10, 1 (<1%) for MHSIS, and 10 (3%) for MHL-W. A total of 357 participants had complete data on all key variables.
The following models were used to address the first hypothesis and identify which IT profession–specific stressors were associated with anxiety, depression, and stress: (1) unadjusted and adjusted logistic regression models to examine the relationship between each of the 12 IT-profession specific stressors and depression (CESD-10), (2) unadjusted and predictor-adjusted logistic regression models to test for the relationship between each of the 12 IT-profession specific stressors and anxiety (GAD-7), and (3) unadjusted and predictor-adjusted linear regression models to test for the association between each of the 12 IT-specific stressors and stress (PSS-10).
A confirmatory factor analysis (CFA) was conducted for the MHL-W because the workplace questionnaire had previously been used only in a single workplace setting in health care. The CFA aimed to test whether each of the 4 questions per vignette loaded onto the intended corresponding MHL constructs.
Mediation Analysis
Mediation analysis was conducted using the medsem package in Stata (StataSE version 17.0; StataCorp). Outputs for the structural equation modeling for the mediation analysis included a modified version of the Sobel test for assessing indirect effects [], as well as the Monte Carlo resampling approach for assessing indirect effects []. Descriptive statistics, a CFA, mediation, and all other analyses were conducted using Stata.
Results
Participants
shows a flowchart of participation, and shows participant characteristics. The majority of the 357 respondents self-identified as male (n=264; 73.9%), were White (n=281; 78.7%), were of non-Hispanic/Latinx ethnicity (n=323; 90.5%), had earned a bachelor’s degree (n=181; 50.7%), and earned US $75,000 or more a year (n=213; 59.7%).

| Female (n=93; 26.1%) | Male (n=264; 73.9%) | Total | ||
| Age (years), median (SD) | 42 (11.4) | 39 (10.7) | 39 (10.9) | |
| Race, n (%) | ||||
| African American or Black | 4 (4.3) | 12 (4.5) | 16 (4.5) | |
| American Indian or Alaskan Native | 0 (0.0) | 3 (1.1) | 3 (0.8) | |
| Asian or Asian American | 12 (12.9) | 31 (11.7) | 43 (12.0) | |
| White | 74 (79.6) | 207 (78.4) | 281 (78.7) | |
| Other | 1 (1.1) | 3 (1.1) | 4 (1.1) | |
| Two or more selected | 2 (2.2) | 8 (3.0) | 10 (2.8) | |
| Ethnicity, n (%) | ||||
| Non-Hispanic | 82 (88.2) | 241 (91.3) | 323 (90.5) | |
| Hispanic | 11 (11.8) | 23 (8.7) | 34 (9.5) | |
| Education, n (%) | ||||
| Less than a bachelor’s degree | 22 (237) | 83 (31.4) | 105 (29.4) | |
| Bachelor’s degree | 43 (46.2) | 138 (52.3) | 181 (50.7) | |
| Graduate’s degree | 28 (30.1) | 43 (16.3) | 71 (19.9) | |
| Health insurance type, n (%) | ||||
| Employer provided | 61 (65.6) | 176 (66.7) | 237 (66.4) | |
| Government provided | 27 (29.0) | 78 (29.5) | 105 (29.4) | |
| None | 5 (5.4) | 10 (3.8) | 15 (4.2) | |
| Income group (US $), n (%) | ||||
| Less than 50,000 | 18 (19.4) | 52 (19.7) | 70 (19.6) | |
| 50,000-74,999 | 20 (21.5) | 54 (20.5) | 74 (20.7) | |
| 75,000-99,999 | 23 (24.7) | 48 (18.2) | 71 (19.9) | |
| ≥100,000 | 32 (34.4) | 110 (41.7) | 142 (39.8) | |
| Mental health history, n (%) | ||||
| Yes | 42 (45.2) | 57 (21.6) | 99 (27.7) | |
| No | 51 (54.8) | 207 (78.4) | 258 (72.3) | |
| CESD-10 score, n (%) | ||||
| No/low | 50 (53.8) | 181 (68.6) | 231 (64.7) | |
| Moderate/severe | 43 (46.2) | 83 (31.4) | 126 (35.3) | |
| GAD-7 score, n (%) | ||||
| No/low | 72 (77.4) | 215 (81.4) | 287 (80.4) | |
| Moderate/severe | 21 (22.6) | 49 (18.6) | 70 (19.6) | |
| MHSIS score, mean (SD) | 5.33 (1.5) | 5.11 (1.7) | 5.17 (1.7) | |
| MHL-W score, mean (SD) | 47.95 (11.9) | 46.46 (10.9) | 46.85 (11.2) | |
| PSS-10 score, mean (SD) | 17.15 (7.9) | 14.30 (8.1) | 15.04 (8.1) | |
aCESD-10: 10-item Center for Epidemiologic Studies Depression Scale.
bGAD-7: 7-item Generalized Anxiety Disorder.
cMHSIS: Mental Help Seeking Intention Scale.
dMHL-W: Mental Health Literacy at the Workplace.
ePSS-10: 10-item Perceived Stress Scale.
Outcome Data
The majority of participants (231/357, 64.7%) were below the minimum cutoff score of 10 for depression as assessed by the CESD-10. Similarly, 287 of 357 (80.4%) respondents reported having no or low symptoms of anxiety. The mean PSS-10 score was 15.04 (SD 8.1), representing a moderate level of stress. For mental health history, most (258/357, 72.3%) of the respondents reported having no known previous mental health diagnosis. On average, 5 stressors were experienced in this population, as shown in Table S1 in . Past-year takedowns were experienced the least (75/357, 21.1%) by the sample, while experiencing pressure to solve complex technical issues was the most common experience (252/357, 70.1%).
Main Results
IT Profession–Specific Stressors and Depression
Prior to controlling for sociodemographic variables, none of the stressors were significantly associated with depression. The respondents who reported past-year exposure to ransomware (odds ratio [OR] 1.85, 95% CI 1.07-3.22; P=.03) or working with leadership that did not wish to invest in or be inconvenienced by cybersecurity initiatives (OR 1.75, 95% CI 1.01-2.97; P=.048) in the past year were more likely to have significant symptoms of depression, after controlling for the covariates. The total number of stressors experienced in the past year also had no significant association with depressive symptoms, even after controlling for the covariates. None of the remaining IT profession–specific stressors experienced in the past year were individually associated with significant symptoms of depression.
IT Profession–Specific Stressors and Anxiety
Past-year exposure to balancing security and usability was associated with lower odds of reported anxiety (OR 0.48, 95% CI 0.28-0.82; P=.008); however, that association did not hold once adjusting for the covariates. All remaining IT stressors had no significant association with anxiety, including after controlling for the covariates.
IT Profession–Specific Stressors and Stress
Controlling for the covariates, respondents who reported making critical technology decisions with limited information in the past year had higher perceived stress by 2.02 points on the PSS-10 scale (SE 0.84, 95% CI 0.37-3.66; P=.02). Similarly, respondents who reported working with limited resources (eg, budget and personnel) in the past year had higher perceived stress by 1.70 points on the PSS-10 scale (SE 0.84, 95% CI 0.04-3.35; P=.04), after adjusting for the covariates. The remaining stressors did not have a significant relationship with perceived stress.
Mediation Analysis
Mediation analysis was performed to assess the mediating role of MHL-W score in the relationship between depression, anxiety, and stress scores (separately) and help-seeking intentions (MHSIS). The results (shown in ) revealed that depression also significantly predicted MHL-W score (coefficient=–2.236; P=.049) and that MHL-W score significantly predicted MHSIS score (coefficient=0.037; P<.001). After controlling for MHL-W score, the direct effect of depression on MHSIS score remained significant (coefficient=–0.438; P=.01). Per the Sobel test and the Monte Carlo approaches, MHL-W score partially mediated the relationship between depression and help-seeking intentions.
| Variable and effect type | Coefficient | Z value | P value | 95% CI | |
| CESD-10 → MHL-W → MHSIS | |||||
| Total effect (CESD-10 → MHSIS) | –0.524 | — | — | — | |
| Direct effects (CESD-10 → MHSIS) | –0.438 | –2.53 | .01 | –0.778 to –0.098 | |
| Indirect effects of CESD-10 on MHSIS | –0.086 | –1.826 | .07 | –0.194 to –0.003 | |
| GAD-7 → MHL-W → MHSIS | |||||
| Total effect (GAD-7 → MHSIS) | 0.033 | — | — | — | |
| Direct effects (GAD-7 → MHSIS) | –0.517 | –2.49 | .01 | –0.924 to –0.110 | |
| Indirect effects of GAD-7 on MHSIS | –0.018 | –0.31 | .75 | –0.128 to 0.093 | |
| PSS-10 → MHL-W → MHSIS | |||||
| Total effect (PSS-10→ MHSIS) | –0.048 | — | — | — | |
| Direct effects (PSS-10→ MHSIS) | –0.028 | –2.83 | .005 | –0.048 to –0.009 | |
| Indirect effects of PSS-10 on MHSIS | –0.005 | 0.003 | .13 | –0.011 to 0.001 | |
aCESD-10: 10-item Center for Epidemiological Studies Depression.
bGAD-7: 7-item Generalized Anxiety Disorder.
cPSS-10: 10-item Perceived Stress Scale.
dNot applicable.
eMHL-W: Mental Health Literacy in the Workplace.
fMHSIS: Mental Help Seeking Intention Scale.
On the contrary, the results for mediation analyses for anxiety and stress did not support MHL-W score as a mediator for anxiety or stress and help-seeking intentions. Although there was a significant relationship between MHL-W score and MHSIS score, there was no significant relationship between GAD-7 score or PSS-10 score and MHL-W score.
Discussion
Key Results
This study was conducted to (1) test which IT profession–specific stressors were associated with depression, anxiety, and stress; and (2) examine the impact of depression, anxiety, and stress on help-seeking as mediated by mental health literacy. For the first objective, we found that past exposure to ransomware attacks and working with leadership that did not wish to invest in or were inconvenienced by cybersecurity initiatives were both associated with higher odds of depressive symptoms. While none of the stressors had a significant relationship with anxiety, two stressors did have a significant relationship with perceived stress. Making critical technology decisions with limited information and working with limited resources were both linked to higher perceived stress. Regarding the second objective, we found that mental health literacy in the workplace only partially mediated the relationship between depression and help-seeking intentions, but not between anxiety or stress and help-seeking intentions.
The findings for the first objective align with and complement findings from prior work. For instance, Northwave’s report on the psychological impact of a ransomware attack on their employees showed there was significant stress experienced immediately after the incident and throughout the following year [], while in this study, ransomware was associated with symptoms of depression and not current perceived stress. This might be because the stress instrument used captures general stress over the past month and is not event-specific. However, the depression questionnaire used captured longer-term emotional stress, which develops over time after prolonged exposure to high-stakes incidents (eg, ransomware). Furthermore, having a leadership team that is unsupportive of cybersecurity initiatives, which would help deter ransomware attacks, was also associated with increased depressive symptoms. This adds to the ransomware literature, which is heavily focused on the financial impact on individuals and organizations and the psychosocial costs to the victims, rather than considering the individuals working tirelessly to mitigate the problem [,]. Only two stressors had a significant association with increased perceived stress: making critical decisions with limited information and working with limited resources. Both of these stressors and increased stress align with the job demands–resources model, in which having inadequate resources places strain on the worker, increasing risk of burnout [,].
The pressure to solve complex technical issues, the constant need to stay up to date with technology, and the task of dealing with unexpected system failures and outages were not associated with depression, anxiety, or stress. This is likely because these stressors, except for the unexpected system failures and outages, are typical daily job activities and expected tasks and responsibilities for individuals working in the IT sector. Staying up to date with technology and solving complex technical issues are part of the allure of working in technology. These may act as positive stressors, potentially increasing stress while also promoting professional and personal growth, rather than predominantly negative experiences for IT professionals []. The influence of positive and welcomed anticipated stressors among IT professionals requires further exploration.
Interestingly, exposure to illicit content was not associated with depression, anxiety, or stress in this study. Previous literature has found that exposure to illicit content (eg, exploitative, violent, and/or abusive content) can have psychologically detrimental effects on children and adolescents []. While similar associations have not been extensively documented among adults, Federal Bureau of Investigation officers have developed coping strategies to deal with exposure to illicit content. For officers who are employed in this line of work, the skill of compartmentalization is essential for sustaining their professional role []. Future research should examine the type and amount of illicit content exposure to increase our understanding of when and how this content becomes harmful, specifically among adults and as an occupational hazard.
MHL in the workplace continues to be an important area of focus []. The mediation results suggest a pathway worth noting between MHL and help-seeking for depression, although the indirect effect is modest. MHL was a partial mediator for depression, but not for anxiety or stress. The lack of mediation found between MHL and anxiety and stress could be due to the measurement timing or the cross-sectional design, which limited the ability to detect indirect effects for both anxiety and stress. Future research using longitudinal designs and alternative mediators could clarify whether these null findings reflect a true absence of mediation or are the result of methodological constraints. Unlike depression and anxiety, stress is not a medical diagnosis, but rather an automatic bodily response that is experienced after certain events. Therefore, it often does not require medical help. Stress is experienced daily and stress levels constantly fluctuate []. Chronic stress, on the other hand, can increase the risk for depression and anxiety [], making it important to note that the PSS-10 instrument used in this study captured past-week perceived stress, not chronic stress.
A 2019 UK industry report by the British Interactive Media Association indicated that 28% of survey respondents experienced past-year anxiety and depression [], a percentage that is similar to the sample in this study, 28.1% of whom reported ever having been diagnosed with a mental health condition. On the other hand, for current depression and anxiety, measured via the CESD-10 and GAD-7 scores, 29.3% of respondents were assessed as having recent symptoms of clinically significant depression and mild or greater symptoms of anxiety. These numbers are much lower than the 81% reported by the British Interactive Media Association. Differences in these numbers could be due to how the questions were formulated. This study used two validated instruments to capture symptoms, while the UK industry survey asked respondents to self-report past-year (12-month) anxiety and depression experiences.
Unfortunately, the results of this study are not directly comparable to those of the UK Biobank cohort study. It is important to note that the UK Biobank cohort study, in addition to being a longitudinal study with a UK sample, measured depression and anxiety with a single assessment tool, the Patient Health Questionnaire-4, while this US-focused study included the CESD-10 and GAD-7. Nevertheless, this study is the first to assess the relationship between IT profession–specific stressors and depression, anxiety, and stress, aiming to shed light on their associations. It also attempted to uncover the mediating role of mental health literacy between mental health conditions and help-seeking intentions.
Limitations and Generalizability
There are a few limitations that must be noted. First, this study used a cross-sectional design, and although a mediation analysis was conducted, neither direction nor cause and effect of the relationships can be determined. The relationships found are associations and must not be regarded as causal. Furthermore, the instrument, MHL-W, used to ascertain MHL relies on self-reported level of knowledge, which might be overinflated. However, this is the only validated MHL instrument that is specific to the workplace, making it the most suitable for this type of research.
Although the sample resembled the demographic characteristics of the 357 IT professionals overall by sex (n=264, 73.9% male vs n=93, 26.1% female) [], this sample is slightly overrepresented by White respondents (281/357, 78.7%). The 2019 US Census Bureau estimates high technology industries are comprised of primarily White (68.5%), followed by Asian (14%) IT professionals []. Although this sample is not representative of the demographic characteristics of the current IT sector, the goal of this study was to understand the relationship between exposures and outcome regardless of demographic information.
Despite the limitations, the results of this exploratory study are promising in that they provide insight into the types of stressors that pose a greater psychological health risk for IT professionals. Again, the possible high-risk stressors identified in this study include past-year exposure to ransomware attacks, making critical technical decisions with limited information, and dealing with leadership that is not interested in cybersecurity initiatives. These results might also be beneficial to IT leaders when considering what response plans are in place to help mitigate the psychosocial impacts these exposures may have on the IT professionals in their organizations. As has been shown previously, leadership training in mental health resources impacts employees’ willingness and actual use of those resources []. Furthermore, the findings highlight the important role of MHL in helping facilitate the connection between experiencing significant symptoms of depression and seeking help to address these symptoms.
Conclusion
As the IT workforce continues to expand throughout many other sectors, thus increasing IT professional opportunities for employment, the lack of comprehensive mental health support and resources in some sectors could have negative consequences for their overall quality of life. Their health and well-being are crucial not only from a worker and an industry-level perspective, but also because of the significance of their job roles. Gaining insight into their mental health needs could facilitate the development of strategies for implementing programs aimed at improving and/or maintaining good mental health.
Before leaders can identify solutions and resources for their teams, we need leaders to be on board with supporting these teams. Given the importance of employee safety, health, and well-being, results from this study can aid IT leaders in identifying situations where IT professionals could be at an elevated risk due to workplace stressors. This awareness would enable them to proactively provide resources and support in a timely fashion. For IT-specific stressors, it is not a matter of if, but rather when, situations such as a ransomware attack will occur. Therefore, having a plan that not only focuses on the attack itself, but the human being behind the computer will be essential for promoting health among IT professionals.
Funding
The authors received no external financial support for the research, authorship, and/or publication of this article.
Data Availability
The datasets generated during and/or analyzed during the current study are available from the corresponding author upon reasonable request.
Authors' Contributions
Conceptualization: EGC
Data curation: EGC
Formal analysis: EGC
Funding acquisition: EGC
Investigation: EGC
Methodology: EGC, NL
Project administration: JTM
Resources: JTM
Supervision: JTM, CS-L, NL, AC
Validation: EGC, NL
Visualization: EGC
Writing—original draft: EGC
Writing—review and editing: EGC, JTM, NL, AC, CS-L
Conflicts of Interest
None declared.
References
- What is information technology? CompTIA. URL: https://www.comptia.org/content/articles/what-is-information-technology [Accessed 2023-01-30]
- Boehm MA, Lei QM, Lloyd RM, Prichard JR. Depression, anxiety, and tobacco use: overlapping impediments to sleep in a national sample of college students. J Am Coll Health. Oct 2016;64(7):565-574. [CrossRef] [Medline]
- Samtani S, Chinn R, Chen H, Nunamaker JF. Exploring emerging hacker assets and key hackers for proactive cyber threat intelligence. J Manage Inf Syst. Oct 2, 2017;34(4):1023-1053. [CrossRef]
- The security profession in 2022-23. Chartered Institute of Information Security. URL: https://www.ciisec.org/survey/the-security-profession-in-2022-23/ [Accessed 2024-05-05]
- Our industry survey. Chartered Institute of Information Security. URL: https://www.ciisec.org/White_Papers [Accessed 2023-04-27]
- Lim VKG, Teo TSH. Occupational stress and IT personnel in Singapore: factorial dimensions and differential effects. Int J Inf Manage. Aug 1999;19(4):277-291. [CrossRef]
- Rao JV, Chandraiah K. Occupational stress, mental health and coping among information technology professionals. Indian J Occup Environ Med. Jan 2012;16(1):22-26. [CrossRef] [Medline]
- The voices of our industry: BIMA tech inclusion & diversity report 2019. British Interactive Media Association. URL: https://bima.co.uk/wp-content/uploads/2020/01/BIMA-Tech-Inclusion-and-Diversity-Report-2019.pdf [Accessed 2022-10-29]
- After the crisis comes the blow - the mental impact of ransomware attacks. Northwave. 2022. URL: https://northwave-cybersecurity.com/whitepapers-articles/after-the-crisis-comes-the-blow [Accessed 2023-02-15]
- Lalloo D, Lewsey J, Katikireddi SV, Macdonald EB, Campbell D, Demou E. Comparing anxiety and depression in information technology workers with others in employment: a UK Biobank cohort study. Ann Work Expo Health. Nov 15, 2022;66(9):1136-1150. [CrossRef] [Medline]
- Jorm AF, Korten AE, Jacomb PA, Christensen H, Rodgers B, Pollitt P. “Mental health literacy”: a survey of the public’s ability to recognise mental disorders and their beliefs about the effectiveness of treatment. Med J Aust. Feb 17, 1997;166(4):182-186. [CrossRef] [Medline]
- Lee HY, Hwang J, Ball JG, Lee J, Yu Y, Albright DL. Mental health literacy affects mental health attitude: is there a gender difference? Am J Health Behav. May 1, 2020;44(3):282-291. [CrossRef] [Medline]
- Yeo G, Reich SM, Liaw NA, Chia EYM. The effect of digital mental health literacy interventions on mental health: systematic review and meta-analysis. J Med Internet Res. Feb 29, 2024;26:e51268. [CrossRef] [Medline]
- Zorrilla MM, Modeste N, Gleason PC, Sealy DA, Banta JE, Trieu SL. Depression and help-seeking intention among young adults: the theory of planned behavior. Am J Health Educ. Jul 4, 2019;50(4):236-244. [CrossRef]
- Jamie MacColl PH, Mott G, James Sullivan J, Sarah P. The scourge of ransomware: victim insights on harms to individuals, organisations and society. Royal United Services Institute for Defence and Security Studies. 2024. URL: https://static.rusi.org/ransomware-harms-op-january-2024.pdf [Accessed 2024-11-01]
- Qualtrics: university information technology services. Indiana University. 2022. URL: https://uits.iu.edu/qualtrics [Accessed 2022-12-01]
- FAQ – frequently asked questions. SurveyCircle. 2023. URL: https://www.surveycircle.com/en/faq [Accessed 2023-02-15]
- Conduct your best research. Prolific. 2023. URL: https://www.prolific.co/researchers#pricing [Accessed 2023-02-20]
- Radloff LS. The CES-D scale: a self-report depression scale for research in the general population. Appl Psychol Meas. 1977;1(3):385-401. [CrossRef]
- Vilagut G, Forero CG, Barbaglia G, Alonso J. Screening for depression in the general population with the Center for Epidemiologic Studies Depression (CES-D): a systematic review with meta-analysis. PLoS ONE. 2016;11(5):e0155431. [CrossRef] [Medline]
- Shrout PE, Yager TJ. Reliability and validity of screening scales: effect of reducing scale length. J Clin Epidemiol. 1989;42(1):69-78. [CrossRef] [Medline]
- Perreira KM, Deeb-Sossa N, Harris KM, Bollen K. What are we measuring? An evaluation of the CES-D across race/ethnicity and immigrant generation*. Soc Forces. Jun 2005;83(4):1567-1601. [CrossRef]
- Spitzer RL, Kroenke K, Williams JBW, Löwe B. A brief measure for assessing generalized anxiety disorder: the GAD-7. Arch Intern Med. May 22, 2006;166(10):1092-1097. [CrossRef] [Medline]
- Johnson SU, Ulvenes PG, Øktedalen T, Hoffart A. Psychometric properties of the General Anxiety Disorder 7-Item (GAD-7) scale in a heterogeneous psychiatric sample. Front Psychol. 2019;10(1713):1713. [CrossRef] [Medline]
- Cohen S, Kamarck T, Mermelstein R. A global measure of perceived stress. J Health Soc Behav. Dec 1983;24(4):385-396. [CrossRef] [Medline]
- Hammer JH, Spiker DA. Dimensionality, reliability, and predictive evidence of validity for three help-seeking intention instruments: ISCI, GHSQ, and MHSIS. J Couns Psychol. Apr 2018;65(3):394-401. [CrossRef] [Medline]
- Moll S, Zanhour M, Patten SB, Stuart H, MacDermid J. Evaluating mental health literacy in the workplace: development and psychometric properties of a vignette-based tool. J Occup Rehabil. Dec 2017;27(4):601-611. [CrossRef] [Medline]
- Baron RM, Kenny DA. The moderator-mediator variable distinction in social psychological research: conceptual, strategic, and statistical considerations. J Pers Soc Psychol. Dec 1986;51(6):1173-1182. [CrossRef] [Medline]
- Zhao X, Lynch JG, Chen Q. Reconsidering Baron and Kenny: myths and truths about mediation analysis. J Consum Res. Aug 2010;37(2):197-206. [CrossRef]
- Chen C. The human consequences of ransomware attacks. Information Systems Audit and Control Association. 2022. URL: https://www.isaca.org/resources/isaca-journal/issues/2022/volume-3/the-human-consequences-of-ransomware-attacks [Accessed 2026-01-21]
- van Boven LS, Kusters RWJ, Tin D, et al. Hacking acute care: a qualitative study on the health care impacts of ransomware attacks against hospitals. Ann Emerg Med. Jan 2024;83(1):46-56. [CrossRef] [Medline]
- Demerouti E, Bakker AB, Nachreiner F, Schaufeli WB. The job demands-resources model of burnout. J Appl Psychol. Jun 2001;86(3):499-512. [CrossRef] [Medline]
- Zaza S, Riemenschneider C, Armstrong DJ. The drivers and effects of burnout within an information technology work context: a job demands-resources framework. Inf Technol People. Dec 7, 2022;35(7):2288-2313. [CrossRef]
- Jensen C. What attracts people to IT? The Forecast by Nutanix. 2019. URL: https://www.nutanix.com/theforecastbynutanix/business/what-attracts-people-to-it [Accessed 2022-09-07]
- Meates J. Problematic digital technology use in children and adolescents: impact on physical well-being. Teach Curric. 2021;21(1):77-91. [CrossRef]
- Cruz N. FBI Law Enforcement Bulletin. Safeguard spotlight: coping with line-of-duty exposure to child pornography/exploitation materials. 2011. URL: https://leb.fbi.gov/spotlights/safeguard-spotlight-coping-with-line-of-duty-exposure-to-child-pornographyexploitation-materials [Accessed 2022-08-05]
- Lam LT, Lam MKP. A web-based and mobile intervention program using a spaced education approach for workplace mental health literacy: cluster randomized controlled trial. JMIR Ment Health. Apr 23, 2024;11:e51791. [CrossRef] [Medline]
- World Health Organization. Stress. 2023. URL: https://www.who.int/news-room/questions-and-answers/item/stress [Accessed 2023-02-25]
- Tafet GE, Bernardini R. Psychoneuroendocrinological links between chronic stress and depression. Prog Neuropsychopharmacol Biol Psychiatry. Sep 2003;27(6):893-903. [CrossRef] [Medline]
- White SK. Women in tech statistics: the hard truths of an uphill battle. CIO. 2023. URL: https://www.cio.com/article/201905/women-in-tech-statistics-the-hard-truths-of-an-uphill-battle.html [Accessed 2023-04-01]
- U.S. Equal Employment Opportunity Commission. Diversity in High Tech. URL: https://www.eeoc.gov/special-report/diversity-high-tech [Accessed 2023-02-01]
- Dimoff JK, Kelloway EK. With a little help from my boss: the impact of workplace mental health training on leader behaviors and employee resource utilization. J Occup Health Psychol. Feb 2019;24(1):4-19. [CrossRef] [Medline]
Abbreviations
| CESD-10: 10-item Center for Epidemiologic Studies Depression |
| CFA: confirmatory factor analysis |
| GAD-7: 7-item Generalized Anxiety Disorder |
| IT: information technology |
| MHL: mental health literacy |
| MHL-W: Mental Health Literacy Tool for the Workplace |
| MHSIS: Mental Help Seeking Intention Scale |
| PSS-10: 10-item Perceived Stress Scale |
Edited by Abhinav Grover; submitted 27.Feb.2025; peer-reviewed by Holger Mühlan; final revised version received 24.Dec.2025; accepted 09.Jan.2026; published 03.Mar.2026.
Copyright© Edlin Garcia Colato, Nianjun Liu, Angela Chow, Catherine M Sherwood-Laughlin, Jonathan T Macy. Originally published in JMIRx Med (https://med.jmirx.org), 3.Mar.2026.
This is an open-access article distributed under the terms of the Creative Commons Attribution License (https://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work, first published in JMIRx Med, is properly cited. The complete bibliographic information, a link to the original publication on https://med.jmirx.org/, as well as this copyright and license information must be included.

