What: Cyberattacks are surging as hackers use AI, ransomware, and cryptocurrency tools, creating new risks for the retail sector.

Why it is important: Increasingly sophisticated attacks are driving regulatory scrutiny and higher insurance costs, compelling retailers to reassess risk management.

The retail sector is experiencing a sharp rise in cyberattacks as hackers leverage AI, ransomware, and cryptocurrency tools to exploit vulnerabilities in digital infrastructure. These attacks are not only more frequent but also more advanced, targeting retailers through both direct breaches and third-party providers. The financial and reputational consequences are significant, with some incidents resulting in millions in losses and prolonged operational disruptions. As retailers expand their digital and omnichannel strategies, the attack surface widens, making traditional security measures inadequate. This evolving threat landscape is prompting a shift toward more comprehensive risk management, with retailers investing in integrated security systems, rapid response protocols, and staff training. Regulatory scrutiny is intensifying, and the cost of cyber insurance is rising, reflecting the growing recognition that cybersecurity is now a core business risk. Retailers are being compelled to reassess their risk management strategies and compliance frameworks to safeguard customer trust and ensure business continuity in an increasingly hostile digital environment.

IADS Notes: The most common retail cybersecurity challenges, as reported by The Retail Bulletin in August 2025, highlight the surge in sophisticated attacks and the need for integrated security strategies. Inside Retail in June 2025 detailed how major retailers faced unprecedented disruptions and losses, while Retail Week in August 2025 emphasised the sector’s vulnerability to third-party breaches. RH-ISAC’s April 2025 analysis revealed that ransomware accounted for 30% of incidents and third-party breaches 41%. Inside Retail in May 2025 underscored how cybersecurity has evolved into a core business risk, directly impacting market value and customer trust.

Why are cyberattacks on the rise? What can be done?