More Than Half: The Story of Cyber-Attacks and Global Organizations in 2017
Three words. It might not seem enough to cause a rethink of your 2018 cyber-security strategy, but it should. Why? Because according to the latest Forrester report, “Top Cybersecurity Threats for Retailers in 2018,” attackers breached more than half of all global enterprises in 2017.
More. Than. Half.
With cyber-criminals enjoying that level of success, you can be sure that cyberthreats will not slow down any time soon. To best protect yourself (and join the select group of organizations that are not breached), it’s important for retailers to first understand three key takeaways from Forrester’s report:
- Omni-channel functionality is becoming a ‘must have,’ but it also increases the surface area for attackers to exploit.
- Ransomware is the fastest growing malware threat, and retailers must guard against an attack on their essential technology, such as POS systems.
- Considering the sheer number of organizations that are impacted by breaches, having a committed, thorough response plan prepared in advance is essential.
With these takeaways in mind, it’s worth considering the active role retailers must take in protecting their own organizations as well as customers. It might seem a daunting task, but a good place to start is to review these top five emerging threats faced by all retailers, and how best to prevent them.
- Omni-channel Fulfillment Capabilities: A Gift to Your Customers… and Hackers – Customers want better experiences, less friction and the ability to pay the way they choose. Unfortunately, they also expect that retail merchants keep them safe. Retailers must train in-store staff to act as guardians of merchandise and information, with a strict verification policy put in place and enforced. Secret shoppers can be a great way to test the strength of this system.
- Another Company’s Breach Could Become Your Problem – When another organization is breached, the stolen data can create a ripple that engulfs your organization. Criminals with access to compromised accounts can commit fraud, which can cost you in real dollars and brand equity. The intelligent use of friction, that is, adding verification, or monitoring customer data for fraud and insights about unusual activity, can limit the impact of compromised accounts (and keep you out of the headlines).
- Non-Card-Based PII Data: The Hacker Magnet – Personalization is a tremendous tool, but for it to be effective you must first have a wealth of personalized identity information (purchase history, demographic profile, Wi-Fi history, etc.). And guess who would love to have drivers’ license numbers, social security numbers and cell phone data? Hackers throughout the world. Retailers must treat this information as the lifeblood of their organization, because in many ways, it is. Tokenize, encrypt and restrict access to this information.
- Ransomware is Holding the Digital World Hostage – Ransomware has quickly become the hacker’s new best friend, with Forrester reporting more than 4,000 attacks have occurred daily since January 1, 2016. If successful, hackers can potentially disrupt an entire operation (imagine that on Black Friday), so security teams must develop an incident response plan to ensure that any downtime is limited.
- Protecting Your Brand Offline – Unfortunately, the odds are that the majority of organizations will be breached. If this happens, you must respond in a way that shows customers you care. Being upfront and transparent about a breach, its impact and your plans to remediate the situation will go a long way toward rebuilding the relationship with your customers. Have this plan in place so you’re not scrambling to react should a breach occur.
Want to avoid joining the “More Than Half”? Visit booth #2753 at NRF Retail’s Big Show, New York City, Jan 14-16 to talk to our experts about cybersecurity and find out how you can receive a complimentary copy of the full Forrester report.
Related Blog Posts
All I Want For Christmas (Or Any Holiday) Is… Instant Payments Gratification
Mark, some of us are fast approaching the end of the holiday shopping season, some of us are fast approaching that time of year when we consume too much egg nog, and some of us are fast approaching too many viewings of Die Hard or It’s a Wonderful Life or Love Actually or Christmas in Connecticut (I’ve disclosed too much about myself). To segue slightly more than slightly, I was at Target over the weekend, braving the holiday shopping crowds, to buy toilet paper, paper towels and tissues… and I took advantage of the 5% off that I get from using my Red Card. I surveyed the throngs of other consumers in the nearby checkout lines and not once did I see another store card. During this, the biggest shopping season of the year, why wouldn’t consumers use loyalty/rewards cards when making purchases?
Fraudsters Don’t Wait for Peak, So Neither Should You: 2019 Fraud Strategy Starts Now!
In existence for barely two decades, eCommerce has transformed not only the way we shop, but also how retailers plan and execute their marketing strategies around the peak shopping season. Now that we’re deep into this period, retailers will have prepared for changes in buyer behaviors, relaxed their strategies to be within the limits of manageable review rate, and most important of all, put strategies in place for increased fraud attempts.
Women in Payments Australia: 8 Insights for Success
Women in Payments continues to go from strength to strength, expanding its footprint globally and running events from Canada (where it was born) and the U.S., to Australia and now the UK. ACI has been a proud global sponsor of Women in Payments since 2014, which has allowed me personally – along with a number of colleagues around the world – to be a part of the growing calendar of Women in Payments events that take place around the globe.
Cybersecurity: Risks, Controls and What to Expect in 2019
The world of Cybersecurity has brought about several subtle changes in 2018. For example, malware and targeted 'Spear Phishing' were on the rise, while the focus on protecting the perimeter has begun to take a back seat to hardening internal controls. As we enter 2019, the changing threat landscape is certain to result in a barrage of additional considerations in how we protect data and systems.
‘Soup To Nuts’ – A Multi-Layered Fraud Menu for the Holiday Season
The holiday shopping season is well underway, with Black Friday now behind us and many retailers around the world braced for higher levels of eCommerce fraud, from Cyber Monday all the way though until Christmas.
Success Speaks: Exploring the Future of Payments Collections in Auto-Finance with SAFCO
When it comes to improving collections, there’s one simple question your organization should ask before embarking on any type of payments project: what does “customer service” mean to our customers?
How Merchants and Consumers Can Fight Fraud This 2018 Holiday Shopping Season
For International Fraud Awareness Week, I want to bring special focus to the upcoming holiday season around the world. Here in the U.S., the holiday season kicks off with Thanksgiving, which is now only a week away. But as consumers and merchants around the world gear up for peak holiday shopping season, fraudsters are also preparing to triumph.
19 for 2019 (Payments Predictions Galore!)
Can you believe it! Snowflakes in the Northeast, which means getting the skis tuned up to race down (steep) hills. And speaking of racing, businesses are racing to complete their 2019 plans and put the finishing touches on remaining 2018 campaigns, which I hope are resounding successes. It also means (delicious or disgusting egg nog… #judgementfree), office holiday parties and prognostications galore!
A Postcard from Money20/20
Greetings from Las Vegas. By the time this note finds you, I will be back at my desk pouring over my follow-up notes from another crazy, wonderful, insightful and totally exhausting Money20/20. The event itself has grown to become the annual ‘must-attend’ on the financial technology schedule, and this year’s event didn’t disappoint with new attendees, old friends and an agenda that kept you on your feet for 4 days (and nights).
Preparing for Peak: Tactical Recommendations for Stopping Holiday Season Fraud
Business might be booming for eCommerce merchants, who see increases in holiday spending climbing steadily upwards each year, but with fraud growing nearly twice as fast as sales, merchants need to have their fraud strategy fine-tuned to ensure that peak retail season is a success. I spoke to Erika Dietrich, ACI’s Leader of Risk Services, to find out how merchants can best prepare their fraud management strategies for the holiday season, ensuring risk strategies are effective – with low friction for genuine customers and high accuracy in detecting fraud.