CrimeMay 02, 2024
4 Indicted in Burglary Ring Targeting Indian, South Asian FamiliesThe men are allegedly responsible for stealing millions in jewelry and other valuables in 43 burglaries in 25 towns across Massachusetts.
SurveysAug 02, 2018
Report: US Retailers Are Top Targets for Data Breaches
According to the 2018 Thales Data Threat Report, U.S. retailers experienced twice as many IT security breaches than other retailers worldwide last year.
New York—A new report says that retailers in the United States are experiencing the most IT security breaches worldwide.
The retail edition of the 2018 Thales Data Threat Report based its findings on input from 100 senior retail IT security managers in the U.S. and 96 IT security managers from retailers in other countries to establish the state of IT security today.
It found that despite an increase in IT security spending—84 percent of U.S. retailers polled plan on upping their budgets this year, compared to 77 percent last year and 67 percent of international retailers this year—cyber-attackers are by and large staying one step ahead of companies.
Fifty percent of U.S. retailers surveyed said they experienced IT security breaches last year alone, compared to 19 percent in the 2017 report. Only 27 percent of global retailers, meanwhile, said they experienced a breach last year.
RELATED CONTENT: Saks, Lord & Taylor the Latest Hit by HackersSeventy-five percent of the respondents in the U.S. said they’ve experienced at least one breach, while 60 percent of global retailers said the same.
The retail industry, which is becoming increasingly digital, is a target for cyber attackers due to its high volume of credit card transactions. In fact, Thales says that overall, it’s the second most breached industry in the United States behind the federal government.
The results of the Thales study on IT security in retail mirror what the Jewelers Security Alliance found in its 2017 crime report. The JSA saw such a large uptick in cybercrime last year that for the first time ever, it broke the losses out separately.
The average dollar loss from cybercrime in the jewelry industry was $1.2 million last year, with JSA President John J. Kennedy calling it a “dangerous and growing crime trend.”
A Bad Investment
Despite the uptick in IT security budgets, the Thales report concluded that retailers are putting their money in places that even they recognize to be ineffective. what they themselves deem the most ineffective places.
Of available tools to battle security breaches, 91 percent of U.S. retailers said analysis and correlation tools are the most effective and 90 percent said data-in-motion— providing security for an e-mail in transit while it’s being sent, for example—is the second most effective weapon.
However, they indicated that their highest spending increases would go to endpoint/mobile defenses (77 percent), even though
they ranked this as the least effective security method. Only 57 percent of retailers plan to increase the budget for data-at rest (stored data) defense, and only 62 percent for data-in-motion defenses, despite these being more effective.
Where the Money Should Go
Thales asserts that tools like discovery/classification and encryption or tokenization are key to protecting against IT security breaches today.
Only 26 percent of U.S. retailers polled said they are implementing encryption in the cloud, compared with 30 percent of global retailers.
Fifty-two percent of U.S. respondents cited a lack of perceived need as the top reason for not devoting more resources to tools like encryption and tokenization, while 47 percent also cited impact on business performance and 46 percent were put off by its complexity.
In a past interview with National Jeweler, Kennedy offered a list of cybersecurity recommendations for jewelers specifically, some of which might involve hiring an IT firm.
They include: proper firewalls, up-to-date anti-virus software, the avoidance of “risky” internet sites and the training of staff on the types of mistakes that often let in hackers.
Staff need to be told, or reminded, not to open or click into unknown or suspicious emails, and to look carefully at emails from known parties for misspellings and other anomalies as emails addressed can be spoofed.
Thales said that retailers should “re-prioritize” their IT security toolsets, focusing on ones that offer service-based deployments, platforms and automation to reduce complexity while adding protection.
It also recommended that retailers go beyond national and international compliance measures and employ security tools like encryption and tokenization. Encryption needs to be applied to all platforms, not just desktop and laptop computers.
Specifically, Thales recommends encrypting the cloud, big data, data located within containers and IoT (interconnected devices with IP addresses).
It’s likely that compliance guidelines will one day mandate these practices, the report said, so retailers can benefit from getting a head start on them, hopefully avoiding data breaches in the process.
RELATED CONTENT: JSA: Smash-and-Grab Robberies, Cybercrime Up in 2017“Traditional endpoint and network security are no longer sufficient, particularly for heavy adopters of public cloud resources such as the U.S. retail sector,” the report said, especially with the expanding use of external cloud services like SaaS (software as a service), PaaS (platform as a service) and IaaS (infrastructure as a service).
Where the Money Should Go
Thales asserts that tools like discovery/classification and encryption or tokenization are key to protecting against IT security breaches today.
Only 26 percent of U.S. retailers polled said they are implementing encryption in the cloud, compared with 30 percent of global retailers.
Fifty-two percent of U.S. respondents cited a lack of perceived need as the top reason for not devoting more resources to tools like encryption and tokenization, while 47 percent also cited impact on business performance and 46 percent were put off by its complexity.
In a past interview with National Jeweler, Kennedy offered a list of cybersecurity recommendations for jewelers specifically, some of which might involve hiring an IT firm.
They include: proper firewalls, up-to-date anti-virus software, the avoidance of “risky” internet sites and the training of staff on the types of mistakes that often let in hackers.
Staff need to be told, or reminded, not to open or click into unknown or suspicious emails, and to look carefully at emails from known parties for misspellings and other anomalies as emails addressed can be spoofed.
Thales said that retailers should “re-prioritize” their IT security toolsets, focusing on ones that offer service-based deployments, platforms and automation to reduce complexity while adding protection.
It also recommended that retailers go beyond national and international compliance measures and employ security tools like encryption and tokenization. Encryption needs to be applied to all platforms, not just desktop and laptop computers.
Specifically, Thales recommends encrypting the cloud, big data, data located within containers and IoT (interconnected devices with IP addresses).
It’s likely that compliance guidelines will one day mandate these practices, the report said, so retailers can benefit from getting a head start on them, hopefully avoiding data breaches in the process.
More on Surveys
The Latest
CollectionsMay 02, 2024
Foundrae Launches ‘Horizon’ Collection“Horizon” invites individuals to explore the limitless possibilities that lie ahead, said the brand.
FinancialsMay 02, 2024
Pandora Raises Guidance After Strong Q1The jeweler credits its recent “Be Love” campaign and ongoing brand revamp for its 17 percent jump in sales.
Brought to you by
Rio’s Reimagined Podcast: For the Love of JewelersMeet Ben Claus—grand prize winner of For the Love of Jewelers 2023 Fall Design Challenge.
IndependentsMay 02, 2024
Oklahoma Jeweler Glenn Lewis Dies at 68The co-founder of Lewis Jewelers was also the longtime mayor of the city of Moore.
Weekly QuizMay 02, 2024
This Week’s QuizTest your jewelry news knowledge by answering these seven questions.
AuctionsMay 02, 2024
Vintage Baume & Mercier With Ties to Elvis Sells for $7K Elvis Presley gifted this circa 1967 gold and diamond watch to Dodie Marshall, his co-star in “Easy Come, Easy Go.”
Brought to you by
The Blueprint for Success in Scalable, Personalized Jewelry RetailWith Ho Brothers, you can unlock your brand's true potential and offer customers the personalized jewelry experiences they desire.
TrendsMay 01, 2024
Amanda’s Style File: All Eyes on EmeraldsMay’s birthstone is beloved for its rich green hue and its versatility.
SourcingMay 01, 2024
Opsydia Names New Sales and Marketing Director Jacqui Larsson joins Opsydia with nearly two decades of experience in the industry.
CrimeMay 01, 2024
Grand Jury to Hear Case Against Jeweler Charged in Fatal Shove Following IJO ShowLast month in Dallas, David Walton pushed another jeweler, David Ettinger, who later died.
CollectionsApr 30, 2024
12 Otherworldly Pieces From Tiffany & Co.’s 2024 Blue BookThe “Tiffany Céleste” collection reimagines designer Jean Schlumberger’s interpretations of the universe.
MajorsApr 30, 2024
Zales Celebrates 100 Years With New CampaignThe brand also created a 100-carat lab-grown diamond necklace in honor of its centennial.
MajorsApr 30, 2024
Platinum Guild International Appoints New CEOTim Schlick has been promoted from his previous position as COO.
Events & AwardsApr 30, 2024
Canadian Jewellers Association Brings Back the Summit It’s the second year for the event, slated to take place in October in Toronto.
Recorded WebinarsApr 29, 2024
Watch: Diamond Identification and Evaluation - How to Protect your BusinessSupplier Spotlight Sponsored by GIA
SourcingApr 29, 2024
De Beers to Move Auction HQ from Singapore to BotswanaSales will be paused while the relocation takes place over the next few months.
CollectionsApr 29, 2024
Simone I. Smith Mixes Denim and Diamonds in New Collection“SIS x MISA Denim and Diamonds” is a collaboration between the designer and celebrity stylist Misa Hylton.
IndependentsApr 29, 2024
Venus Jewelers Relocating After 45 YearsThe retailer is moving to a newly designed space in the same shopping center.
CollectionsApr 26, 2024
Piece of the Week: Jacquie Aiche’s Starry Galaxy NecklaceThe necklace is featured in the brand’s “Rebel Heart” campaign starring Adam Levine and Behati Prinsloo.
Events & AwardsApr 26, 2024
AGS Conclave and GIA Symposium Are ConvergingThe two organizations will host a joint event, “Converge,” in September 2025.
SourcingApr 26, 2024
Anglo American Reportedly Shopping De Beers as BHP Eyes Anglo Big changes appear to be on the horizon for the diamond miner and its parent company, Anglo American.
Events & AwardsApr 25, 2024
Alexis Padis Takes Over as AGS Board President Padis succeeds Lisa Bridge, marking the first time the organization has had two women board presidents in a row.
EditorsApr 25, 2024
5 Tips for Creating Fans from the Top (Savannah) Banana Jesse Cole, founder of Fans First Entertainment, shared the “five Es” of building a fan base during his AGS Conclave keynote.
WatchesApr 25, 2024
Audemars Piguet and John Mayer Partner on Limited Edition WatchThe Royal Oak Perpetual Calendar "John Mayer" was celebrated at a star-studded party in LA last week.
SourcingApr 25, 2024
De Beers Lowers Production Guidance for 2024The announcement came as the company reported a 23 percent drop in production in Q1.
MajorsApr 25, 2024
Detroit Lions’ QB Jared Goff Keeps Going to JaredThe three-time Pro Bowler continues to partner with the retailer, donating to a Detroit nonprofit and giving watches to fans.
