Surveys

Report: US Retailers Are Top Targets for Data Breaches

SurveysAug 02, 2018

Report: US Retailers Are Top Targets for Data Breaches

According to the 2018 Thales Data Threat Report, U.S. retailers experienced twice as many IT security breaches than other retailers worldwide last year.

New York—A new report says that retailers in the United States are experiencing the most IT security breaches worldwide.

The retail edition of the 2018 Thales Data Threat Report based its findings on input from 100 senior retail IT security managers in the U.S. and 96 IT security managers from retailers in other countries to establish the state of IT security today.

It found that despite an increase in IT security spending—84 percent of U.S. retailers polled plan on upping their budgets this year, compared to 77 percent last year and 67 percent of international retailers this year—cyber-attackers are by and large staying one step ahead of companies.

Fifty percent of U.S. retailers surveyed said they experienced IT security breaches last year alone, compared to 19 percent in the 2017 report. Only 27 percent of global retailers, meanwhile, said they experienced a breach last year.

RELATED CONTENT: Saks, Lord & Taylor the Latest Hit by Hackers
Seventy-five percent of the respondents in the U.S. said they’ve experienced at least one breach, while 60 percent of global retailers said the same.

The retail industry, which is becoming increasingly digital, is a target for cyber attackers due to its high volume of credit card transactions. In fact, Thales says that overall, it’s the second most breached industry in the United States behind the federal government.

The results of the Thales study on IT security in retail mirror what the Jewelers Security Alliance found in its 2017 crime report. The JSA saw such a large uptick in cybercrime last year that for the first time ever, it broke the losses out separately.

The average dollar loss from cybercrime in the jewelry industry was $1.2 million last year, with JSA President John J. Kennedy calling it a “dangerous and growing crime trend.”

A Bad Investment

Despite the uptick in IT security budgets, the Thales report concluded that retailers are putting their money in places that even they recognize to be ineffective. what they themselves deem the most ineffective places.

Of available tools to battle security breaches, 91 percent of U.S. retailers said analysis and correlation tools are the most effective and 90 percent said data-in-motion— providing security for an e-mail in transit while it’s being sent, for example—is the second most effective weapon.

However, they indicated that their highest spending increases would go to endpoint/mobile defenses (77 percent), even though
they ranked this as the least effective security method. Only 57 percent of retailers plan to increase the budget for data-at rest (stored data) defense, and only 62 percent for data-in-motion defenses, despite these being more effective.
RELATED CONTENT: JSA: Smash-and-Grab Robberies, Cybercrime Up in 2017
“Traditional endpoint and network security are no longer sufficient, particularly for heavy adopters of public cloud resources such as the U.S. retail sector,” the report said, especially with the expanding use of external cloud services like SaaS (software as a service), PaaS (platform as a service) and IaaS (infrastructure as a service).

Where the Money Should Go

 Thales asserts that tools like discovery/classification and encryption or tokenization are key to protecting against IT security breaches today.

Only 26 percent of U.S. retailers polled said they are implementing encryption in the cloud, compared with 30 percent of global retailers.

Fifty-two percent of U.S. respondents cited a lack of perceived need as the top reason for not devoting more resources to tools like encryption and tokenization, while 47 percent also cited impact on business performance and 46 percent were put off by its complexity.

In a past interview with National Jeweler, Kennedy offered a list of cybersecurity recommendations for jewelers specifically, some of which might involve hiring an IT firm.

They include: proper firewalls, up-to-date anti-virus software, the avoidance of “risky” internet sites and the training of staff on the types of mistakes that often let in hackers.

Staff need to be told, or reminded, not to open or click into unknown or suspicious emails, and to look carefully at emails from known parties for misspellings and other anomalies as emails addressed can be spoofed.

Thales said that retailers should “re-prioritize” their IT security toolsets, focusing on ones that offer service-based deployments, platforms and automation to reduce complexity while adding protection.

It also recommended that retailers go beyond national and international compliance measures and employ security tools like encryption and tokenization. Encryption needs to be applied to all platforms, not just desktop and laptop computers.

Specifically, Thales recommends encrypting the cloud, big data, data located within containers and IoT (interconnected devices with IP addresses).

It’s likely that compliance guidelines will one day mandate these practices, the report said, so retailers can benefit from getting a head start on them, hopefully avoiding data breaches in the process.
Ashley Davisis the senior editor, fashion at National Jeweler, covering all things related to design, style and trends.

The Latest

Karl Getschel and Bob Yanega of Smyth Jewelers
IndependentsAug 14, 2026
Smyth Jewelers to Open Fourth Location

The family-owned jeweler will open a new showroom in Bel Air, Maryland, this fall.

Stock image of a gavel
CrimeAug 14, 2026
Wife of Man Convicted in Jeweler’s Murder Sentenced for Conspiracy

Amanda Ileana Hernandez is married to Carlos Hernandez, one of two men in prison for the 2024 murder of Michigan jeweler Hussein Murray.

Paul Morelli Wavey Vine Earrings
TrendsAug 14, 2026
Paul Morelli’s Latest ‘Wavey Vine’ Earrings Embrace Color

The reimagined jewel, our Piece of the Week, trades the diamonds in the original 1998 design for blue, pink, yellow, and green sapphires.

1872-x-1052-July-ad (1).png
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying Events

Retailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.

Cover.jpg
Supplier BulletinAug 13, 2026
Your Piece Could Be the One Editors Talk About

Sponsored by American Gem Trade Association

Weekly QuizAug 13, 2026
This Week’s Quiz
Test your jewelry news knowledge by answering these questions.
Take the Quiz
Two Pandora Talisman pendants
FinancialsAug 13, 2026
Pandora’s ‘Talisman’ Collection Shines, Lab-Grown Diamond Sales Fall

In the United States, second-quarter sales were flat amid soft consumer sentiment and lower in-store traffic.

Cuckoo Cuckoo Cadbury Conundrum egg
AuctionsAug 13, 2026
This Gold Cadbury ‘Conundrum’ Egg Set a World Auction Record

The 22-karat gold egg, sold at Batemans Auctioneers in the U.K., was part of a 1980s treasure hunt ad campaign for Cadbury Creme Eggs.

Brought-To-By-Article-Top-Image.jpg
Brought to you by
Wedding Band Trends 2026: Personalization Takes Center Stage

Colored gemstones, artisan finishes, mixed metals, and meaningful details are shaping demand in bridal jewelry.

Picture of 2,488 carat rough diamond next to tweezers, a golf ball, and a loupe
SourcingAug 13, 2026
2,488-Carat Diamond, Largest Found in Botswana, Has a New Owner

Lucara Diamond Corp., which recovered the “Motswedi” diamond from the Karowe mine, sold the stone for an undisclosed amount.

John Hardy Heishi Collection Campaign Imagery
CollectionsAug 13, 2026
John Hardy Infuses ‘Icon,’ ‘Heishi’ Collections with Color

The expanded collections now feature hand-cut gemstones like topaz, tanzanite, chrysoprase, chalcedony, smoky quartz, and fire opal.

Jean Dousset Westfield Valley Fair
Lab-GrownAug 13, 2026
Jean Dousset Opens Third Store

The lab-grown diamond jewelry brand’s newest boutique is in Westfield Valley Fair in Santa Clara, California.

Legacy emerald
SourcingAug 12, 2026
Eshed-Gemstar on the Painstaking Process of Cutting ‘The Legacy Emerald’

The gemstone supplier and manufacturer acquired the remarkable 104-gram Zambian emerald at Gemfields’ auction in May.

Surveillance image of jewelry thieves
CrimeAug 12, 2026
Elderly NYC Woman Targeted in Jewelry Swap Scheme

Two suspects offered to trade the woman a “winning” lottery ticket for her jewelry.

The Finsch Diamond Mine in South Africa, owned by Petra Diamonds Ltd.
SourcingAug 12, 2026
Another Diamond Mine Poised to Close

Finsch has been in business rescue since May, and owner Petra Diamonds said it sees no viable path forward for the mine.

Stock image of gavel, handcuffs, and law books
CrimeAug 12, 2026
Jewelry Store Employee Gets 20 Years to Life in Choking Death of Boss

Michel Patrick DeSalles was sentenced after pleading guilty to the 2017 murder of Omid Gholian, who owned a jewelry store in Manhattan.

Beth Miller Frederick Goldman
MajorsAug 12, 2026
Frederick Goldman Names New SVP of Sales

Longtime industry executive Beth Miller has taken on the role.

Verdura unicorn brooch
AuctionsAug 11, 2026
Verdura Unicorn Brooch With Royal Connection Up for Auction

The brooch was owned by Virginia Fortune Ryan Ogilvy, who served as a lady of the bedchamber to Queen Elizabeth II for nearly 50 years.

Jamie Cygielman
MajorsAug 11, 2026
Signet Jewelers Selects Mattel Exec to Lead Zales, Banter

Jamie Cygielman will take on the role on Aug. 24.

Richard Moore
IndependentsAug 11, 2026
Polly’s Fine Jewelry Co-Owner Richard Moore Dies at 69

Moore, Polly’s husband, is remembered as a family man with an easygoing spirit and a love for sports and the outdoors.

National Jeweler columnists Duvall O’Steen and Jen Cullen Williams
ColumnistsAug 11, 2026
Creative Connecting: How to Sell Colored Gemstones to Gen Z

Duvall O’Steen and Jen Cullen Williams share the best ways to display, present, and explain colored gemstones to younger customers.

NAJA logo
Events & AwardsAug 11, 2026
NAJA Announces Lineup For 2026 Fall Virtual Conference

The mid-year conference for jewelry and watch appraisers will take place Sept. 5-6 on Zoom.

Honest Hands Workbench Ring Builder
TechnologyAug 10, 2026
Colorado Jeweler Launches Customization Tool He Built Himself

Honest Hands Ring Co. Founder Benjamin Bosworth shared his thoughts on jewelry technology and why AI can never replace the human element.

QVC Group logo
MajorsAug 10, 2026
QVC Exits Chapter 11 Bankruptcy, Names New Interim CEO

QVC Group President and CEO David Rawlinson is temporarily being replaced by a familiar face, former QVC CEO Mike George.

State Property Lorenz Station Bracelet
CollectionsAug 10, 2026
State Property Puts a Ripple in the ‘The Voyager’ Collection

The brand also added two one-of-a-kind brown diamond pieces to the “Sanssouci” series of its “Gardens” collection.

Ostbye receiving Vendor of the Year trophy at 2026 IJO show
MajorsAug 10, 2026
And IJO’s 2026 Vendor of the Year Is …

Ostbye took home top vendor honors at the Independent Jewelers Organization’s show, held last month in Kentucky.

1872-x-1052-July-ad (2).png
Supplier BulletinAug 07, 2026
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying Events

Sponsored by Stratus Estate Buyers

Blue Nile President Pamela Cloud
MajorsAug 07, 2026
Retail Veteran Pam Cloud Appointed President of Blue Nile

Cloud, who will officially join Blue Nile on Monday, spent 26 years at Tiffany & Co. and founded jewelry brand Roseate.

×

This site uses cookies to give you the best online experience. By continuing to use & browse this site, we assume you agree to our Privacy Policy