Skip to main content
Cybersecurity Statistics

Cybersecurity statistics / Retail

71% of retail and hospitality CISOs identify AI as a primary concern, citing risks such as data leakage, insider misuse, and insufficient governance controls.

PublisherRetail & Hospitality Information Sharing and Analysis Center (RH-ISAC) and IANS
Report2026 CISO Benchmark Report
Published1 April 2026
TopicsRetail, Hospitality, AI, AI Risk

Published by Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) and IANS in 2026 CISO Benchmark Report, 1 April 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

32% of retail organizations paid the ransom, the lowest payment rate of any sector.
Sophos, 18/07/2026
The three industries with the highest baseline PPP are Healthcare & Pharmaceuticals at 42.7%, Insurance at 38.1%, and Retail & Wholesale at 36%.
KnowBe4, 12/07/2026
Retail firms average 10 days to remediate exposures.
Intruder, 27/05/2026
83% of organizations in crypto and decentralized finance, 79% in retail, and 76% in manufacturing experienced cyber attacks.
Sygnia, 27/05/2026
The top three targeted sectors by ransomware victims were manufacturing (1,284), business services (824), and retail (682).
Fortinet, 27/05/2026
Nearly 90% of retail and hospitality CISOs expect spending on AI-related security initiatives to rise, often through reallocating existing budgets rather than adding new funds.
Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) and IANS, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.