The Litany Of The Hacked Gets New Members: Early June 2025 Edition



Cartier. Harrods. The North Face. Victoria's Secret. Additions to the litany of the hacked include marquee brands. Let's reflect on this.

All of these entities are retailers. There are some issues inherent to retailing that make them inviting cyber-targets: corporate management that is remote (in any possible sense of the word) from stores, practices that reduce barriers for people/customers to access merchandise either in person or online, and low-paid staff unlikely to be around long enough or motivated to benefit from or care about annual cybersecurity training.

Second, and no blame here, these are entities that put a lot of money into branding and marketing. They are about creating image and experience. A secure shopping experience is not something that comes to mind when you think "tank watch" or lingerie.

The result of all this brand development and cachet is catnip for cyberthieves. Customers who are willing to pay for the brand image have money. They are the targets, not the retail entities themselves.

The leaders of these companies are obviously embarassed, and that's understandable. The best way forward is to emphasize and commit to the practice that the best brands thrive in cyber-secure environments.

A cybersecurity excutive said, in response to these incidents, that these companies "need to break things." No specifics, but let's fill in the blanks with some tough love: managers need to break their habit of ignoring cybersecurity and cybersecurity leaders need to break their habit of fogging managers with technical detail. Strive to win together, folks.

Comments