Skip to content

Topic

Retail cybersecurity

Security incidents and defences at retailers and e-commerce companies that hold large volumes of customer and payment data.

Current stories

securityOne report1 publisher

CERT-FR warns French supermarket refrigeration attacks are probably still under way

France's CERT-FR said attack campaigns against supermarket refrigeration controls are probably still ongoing after 700 of 10,000 sites were hit. Food worth millions of euros spoiled across several major retail chains.

Reality

Evidence55
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence50
leadershipOne report1 publisher

Asos hackers reached Snowflake through an employee's login, City AM reports

Attackers who threatened millions of Asos customers got into its Snowflake-hosted data by posing as an employee's trusted contact, City AM reports. Its report names ShinyHunters for H&M alone among Asos, H&M and TFG, so a shared method across the three is unconfirmed.

Publishers:cityam.com

Reality

Evidence40
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence45
securityConfirmed9 publishers

Phase Eight, Hobbs and Whistles owner discloses a cyber incident a week after Asos

TFG London identified a cybersecurity incident on Sunday 11 October that hit IT systems at Phase Eight, Hobbs and Whistles. TFG says it has no reason to believe payment information is at risk, and the Independent counts it as the second UK retailer hack in a week.

Perspective Coverage

9 publishers
Builder
Builder 5%
Operator
Operator 68%
Investor
Investor 27%

Reality

Evidence55
Adoption
Not scored
Hype gap+10
Incentives40
Confidence72
leadershipConfirmed2 publishers

Asos traces its data breach to one employee fooled by a fake trusted contact

Asos said hackers obtained an employee's login by posing as a trusted contact, then reached customer names and contact details on third-party platforms. The shares fell on the hackers' app alert two days before Asos explained it. For a board, that puts staff checks and disclosure speed inside the same risk.

Reality

Evidence60
Adoption
Not scored
Hype gap+10
Incentives70
Confidence58
securityOne report1 publisher

Group-IB traces ASOS's rogue push alert to a renamed gaming-trade Telegram account

Group-IB found the Telegram channel in ASOS's October 6 rogue push alert was opened that day by an account once used for gaming-item trading. Until data surfaces, the Snowflake claim is unproven and the abused messaging platform is the lead to work.

Reality

Evidence55
Adoption
Not scored
Hype gap+20
Incentives45
Confidence50