Retailers must adopt zero-trust architectures as ransomware groups increasingly target supply chain vendors (evidenced by a recent breach impacting major banks). The attack vectors include social media promotions on platforms like TikTok and Facebook, which lure users to these fake storefronts. We help you reduce risk and increase resilience so you can keep your business moving forward Retailers are facing an increasingly hostile cyber threat environment, as attackers grow more sophisticated in exploiting the structural https://www.agence-enash.com/what-is-the-apple-shopping-event/ complexities that define how the sector operates. Notably, Auchan confirmed that financial data, authentication credentials (passwords), loyalty card PIN codes, and customer reward balances remained secure, indicating the breach was contained to specific database tables rather than achieving full system compromise. More alarmingly, voice and video deepfakes now enable attackers to impersonate guests, vendors, or senior staff with hyper-realism so they can more easily bypass identity verification.
- Key Zero-Trust practices include continuous identity checks, micro-segmentation of networks, and multi-factor authentication (MFA).
- Retailers are increasingly worried about threats created by automation, AI tools, and machines acting as agents in their environments.
- In June 2025, a ransomware attack on United Natural Foods, Inc. (UNFI), a leading food distribution company, demonstrated the real-world impact of cyberattacks on supply chains.
- The attack vectors include social media promotions on platforms like TikTok and Facebook, which lure users to these fake storefronts.
- This alignment of best practices and frameworks helps retailers systematically reduce the added risk that comes from doing business in an interconnected marketplace.
- This proactive, leadership-driven approach is the cornerstone of effectively mitigating cyber threats in a complex retail environment.
Notably, Target had been certified as PCI DSS compliant in September 2013, just months before the breach – yet the attackers succeeded by exploiting lapses that may have developed in Target’s environment after the compliance audit. Requirements include maintaining firewalls, using strong encryption for stored and transmitted card data, regular vulnerability scanning, access control measures, network segmentation of the cardholder data environment, and continuous monitoring of network resources. By integrating ISO into their risk strategy, retailers create a cycle of planning, implementing, reviewing, and improving security controls, which is crucial given the dynamic threat environment. The ISO standard requires organizations to assess security risks, implement a comprehensive set of security controls (referencing a catalog of controls in ISO 27002), and undergo regular reviews and continuous improvements. In other words, the framework now underscores that senior leadership oversight (“Govern”) and third-party/supplier security are integral to cybersecurity – both points resonant with the retail industry’s needs.
Table 1 summarizes the multifaceted impact of the Target breach, highlighting both quantitative losses and qualitative consequences. Common threat vectors include point-of-sale malware, e-commerce website skimming (Magecart-style attacks), ransomware on corporate networks, and phishing or social engineering targeting retail employees. Retail is one of the industries most frequently targeted by cybercriminals due to the direct financial gain from stealing payment card data and personal information. Cybersecurity has become a critical component of corporate risk management, especially in the retail industry where organizations handle vast amounts of payment data and personal customer information.
Cyber Security News Bulletin Weekly – Mythos is Back, WhatsApp Username, Kali Linux 2026.2, +20 Stories
In its latest Sustainability Report for 2024–2025, Kaspersky details how it grows and supports its people, reduces its environmental impact and operates with transparency — three of the five strategic areas that make up the company’s ESG priorities. End-to-End Retail IoT Cybersecurity Services help organizations identify vulnerabilities, strengthen security controls, improve compliance readiness, and build resilience against evolving cyber threats. What should internet users do to remain vigilant against cyber threats?
Resources
CrowdStrike stands out in AI security because Falcon Flex subscriptions, AI tools like Charlotte and Falcon AI Detection and Response, and partnerships with AWS, Cognizant and leading AI platforms tie its growth directly to how enterprises secure new AI workloads. Figma stands out because it sits at the center of how product and design teams actually work, with around 95% of Fortune 500 companies using its platform and AI tools like Make and Weave increasingly woven into everyday workflows. What happens if it’s compromised, https://www.visual-strategies.org/what-are-the-trends-in-color-usage-for-branding/ and how do you detect that before it’s too late? The Alaska State Troopers agency was among the law enforcement agencies to report issues, warning people that 911 was temporarily not working.
UpGuard’s Updated Cyber Risk Ratings
What is cyber security culture and how can organizations build one to improve security posture and resilience? T-Systems offers security solutions such as SASE, Microsegmentation, Endpoint Detection and Response (EDR), Automated Penetration Testing, and more to improve not just security posture, but also overall resilience. SASE security also secures email communication systems to protect against phishing attacks, business email compromise (BEC), and data leaks. They also help prevent malware attacks and ensure secure processing of payment information on POS systems. A compromised POS system can lead to card skimming, theft of payment data, and unauthorized access to the retail network. A SASE solution can offer robust firewall security and ensure unauthorized users cannot access critical resources.
In today’s hyper-connected world, cybersecurity is the foundation for trust, growth and resilience. The current workforce challenges that contribute to human-driven breaches are also unlikely to disappear, as the growing value of retail data indicate that cybersecurity is increasingly becoming an operational issue. This includes behavioural insights that can be used for competitive advantage, market positioning, or broader intelligence gathering.
- However, understanding the complex web of interdependence in such a large system remains crucial.
- For industry professionals and researchers, the intersection of cybersecurity and corporate risk in retail offers valuable lessons in resilience and the necessity of aligning security efforts with business objectives.
- The ISO standard requires organizations to assess security risks, implement a comprehensive set of security controls (referencing a catalog of controls in ISO 27002), and undergo regular reviews and continuous improvements.
- These inconsistencies can confuse users while exploiting brand recognition.
- Retail organizations manage a diverse infrastructure that includes IoT devices, payment systems, mobile applications, cloud platforms, APIs, wireless networks, third-party integrations, and centralized management systems.
Resources That Might Be Useful For You
For a complete breakdown of the incident, the impact and JLR’s response, don’t forget to download our Jaguar Land Rover Cyber Attack Timeline. This impact was not limited to JLR alone; automotive output across the country fell sharply. What began as a security containment action soon turned into an extended operational crisis that highlighted the growing vulnerability of industrial and manufacturing infrastructure to cyber threats. For weeks, parts of the business remained offline, with only gradual restoration of digital services. Beginning over the Easter weekend in April 2025, attackers exploited social engineering and third-party access, tricking service desk personnel into resetting credentials and gaining entry into M&S’s internal systems.
By analyzing large volumes of network traffic and endpoint data, they can detect patterns that traditional security tools might miss, enabling faster and more accurate threat identification. Retailers face constant threats from hackers targeting customer payment data, online shopping platforms, and POS systems, making advanced threat detection and monitoring technologies essential. Identify, evaluate, and mitigate risks to create a safe and secure environment for your employees and customers. Retailers often face tight budgets that make it challenging to invest in advanced cybersecurity tools, skilled personnel, or regular system upgrades.
Kaspersky discovered a malware campaign targeting Steam users through infected wallpaper
Other automated threats include credential stuffing, account takeover, gift card cracking, web and API scraping, fake account creation and inventory scalping. One of the major challenges for the retail industry is the rise of automated threats. With the growth of e-commerce and digital marketing, the retail industry has seen an increase in threats against their businesses. In this section we’re taking a look at the top cybersecurity challenges in the retail industry and how companies can address them. As the retail industry continues to move towards digitization and e-commerce, the need for a robust cybersecurity strategy is critical now more than ever. Retailers have always been attractive targets for cyber attackers and data thieves.