Top 5 industries by API vulnerability: Education: 37.7%, Retail: 29.8%, Media: 18.8%, Government: 18.5%, Professional Services: 10.6%.

In 2025 (through 7/2/2025), four retail, four insurance, and three aviation firms attacked by Scattered Spider.

Retail trade accounted for only 4% of total ransomware victims in Q2 2025.

Retail fraud is projected to more than double again, reaching 1 in every 56 calls in 2025.

Retail fraud doubled, with the sector experiencing an average of one fraud attempt in every 127 calls in 2024. This is five times higher than financial institutions.

Retail saw a +107% increase in synthetic voice attacks in 2024.

48% of retailers lack visibility into how AI models handle customer data.

Nearly a fifth (16%) of respondents said they consider retail fraud a victimless crime.

9% of respondents said they had heard about retaile fraud from classmates.

18% of respondents claimed to personally know someone involved in insider fraud.

58% of respondents have been exposed to refund hacks disguised as influencer content.

21% of respondents said they had heard about retaile fraud from colleagues.

Around half of consumers on both sides of the Atlantic have been targeted by social media advertising promoting retail fraud guides and services and thinly disguised ‘refund hacks’.

45% of respondents have been targeted by ads for retail fraud guides or services on social media.

Most (58%) assume retailers can and should absorb the costs of fraud without a major impact on their business or prices.

A third (34%) of respondents argued that fraud up to £100 is permissible.

12% of respondents knew someone working at a retailer involved in insider fraud.

15% of respondents said they’d consider more serious retail fraud under the right circumstances.

The majority (82%) of respondents said they had heard about retail fraud from friends, family, colleagues, and classmates.

6% of respondents knew someone working in fulfilment services involved in insider fraud