Take action now against active shooter threats

How one retailer's proactive face matching led to ID, arrest without violence

Active shooter attacks spiked by 52.5 percent in 2021, according to the FBI. Most happened in "commerce" areas, such as shopping malls and grocery stores. In response, retailers are quickly adopting technologies, including face matching, that offer advance warning of threats.

Not all violence is preventable, but retailers can increase their chances of stopping attacks before they start. Here's how one retailer's fast, proactive reaction to a real-life threat led to an arrest with no violence or injuries-and most importantly, before the threatened attack happened.

The retailer became aware of a potential active shooter threat on a popular social media platform. An unknown and unverified individual made a direct threat of gun violence in his post, and he suggested that customers with children avoid the retailer's store.

Minutes after the threat was posted, the retailer ran the profile photo through the FaceFirst Visitor Search Investigation tool. Had the person of interest visited any of the retailer's stores in the past 45 days? Within seconds, the search revealed two face matches at two locations, one from two weeks back and another just one day prior.

The retailer's asset protection team reviewed the matched events and security camera video, then collaborated with local law enforcement. Officers confirmed the man was a known offender, with a record of violent crimes against another retailer and a history of mental illness. Using face matching technology, the retailer formed a threat profile for the man in less than two hours.

Eight days later, the man returned to the retailer's store. As he entered, the FaceFirst system matched his face and immediately generated a match notification. The store management team confirmed the notification and followed the retailer's policy on the notification: "Do not approach-call LE." Law enforcement officers responded quickly and arrested the man nearby. The incident was resolved without violence, and a restraining order was issued soon thereafter. The man has not returned to any of the retailer's stores since his arrest.

Calculate the risks of being caught unaware when a known offender enters your store. If you knew there was a proven solution to keep your valued customers and associates safer from violent offenders, would you implement it? The real risk is answering no. FaceFirst's solution is fast, accurate, and ethical-take action today at facefirst.com.


Another Real-World Example of Violence Impacting Retailers

Brockton, MA: Suspected Gunman in Deadly Dollar Tree Shooting at Large

The gunman was reportedly a former employee of the Dollar Tree store

The man suspected of killing one person and wounding another in a double shooting at a Dollar Tree store in Brockton, Massachusetts, is still at large, authorities said. He was identified as Luis Soto, a 32-year-old former employee of the store, according to the Plymouth County District Attorney's Office.

They noted that the shooting does not appear to be random, but Soto is believed to be armed and dangerous. Authorities identified the man who died in Tuesday's shooting as East Boston resident Dongbin Pyon, 38. He died after being rushed to Good Samaritan Hospital along with the other shooting victim, who hasn't been identified; that man's condition hasn't been released.

Soto is wanted on a murder charge after fleeing the store after the shooting, prosecutors said. They've located his car but, as they search for him, are asking anyone with information on his whereabouts to call state or Brockton police. nbcboston.com  turnto10.com
 

Illinois 'Armed Security Protection Act' Seeks to Curb Theft Epidemic
The bill would require security guards in pawn shops, grocery stores, gas stations & more

Proposed Illinois Armed Security Protection Act would require security be stationed at certain types of businesses
A state mandate being considered in Illinois would require many types of businesses in cities with populations over 2 million - limiting its effect to Chicago only. HB1231 would require businesses to independently employ security guards to dispel shoplifters and other criminals.

"Creates the Armed Security Protection Act. Provides that beginning July 1, 2024, banks, pawn shops, grocery stores, and gas stations in municipalities having a population in excess of 2,000,000 inhabitants must employ and have on the premises at least one guard during the hours they conduct business with the public. Provides that the Act is inoperable after June 30, 2027," the bill's synopsis reads.

There are only around 200 banks in the city and over 260 grocery stores, but gas stations are everywhere. As of 2019, there were over 1,800 gas stations in Chicago. If the bill were to pass all 1,800 gas stations would be mandated to employ a security guard during hours of operation.

The average pay for security guards in Illinois is between $16-17 per hour. If required to employ full-time guards that could easily mean over $100,000 per year in additional operating costs every year for 24-hour locations.

The bill's introduction comes just over a year after Chicago Mayor Lori Lightfoot noted she was "disappointed" with Chicago retailers who rely on Chicago Police to enforce public safety instead of private guards.

Critics struck out at Lightfoot for blaming the victims of crime rather than addressing the underlying public safety issues leading to the crimes. At the time of Lightfoot's remarks, the city was dealing with a historically high level of crime, including more homicides than in the previous 30 years. Elevated crime rates have continued. Since State's Attorney Kim Foxx wanted to exclusively charge thefts above $1,000 in 2016, there has been an epidemic of theft in Chicago. Since the shift, organized gangs have entered establishments brazenly, stolen goods and fled. privateofficerbreakingnews.blogspot.com


New Federal Report Studies America's Gun Violence Epidemic
Ghost Guns & Semiautomatic Pistols are a Growing Factor in Violent Crime

First sweeping federal gun crime report in 20 years released

The Bureau of Alcohol, Tobacco and Firearms created a statistical portrait that law enforcement agencies can use to address new threats

The most expansive federal report in over two decades on guns and crime shows a shrinking turnaround between the time a gun was purchased and when it was recovered from a crime scene, indicating firearms bought legally are more quickly being used in crimes around the country.

It also documents a spike in the use of conversion devices that make a semiautomatic gun fire like a machine gun, along with the growing seizure of so-called ghost guns, privately made firearms that are hard to trace.

The report comes as the nation grapples with a rise in violent crime, particularly from guns.

The report shows 54% of guns that police recovered in crime scenes in 2021 had been purchased within three years, a double-digit increase since 2019. The quicker turnaround can indicate illegal gun trafficking or a straw purchase - when someone who can legally purchase a gun buys one to sell it to someone who can't legally possess guns. The increase was driven largely by guns bought less than a year before, it said.

The number of new guns overall in the U.S. grew significantly during that time as gun sales shattered records during the coronavirus pandemic.

Most guns used in crimes changed hands since their purchase, the report states. It also found what Deputy Attorney General Lisa Monaco called an epidemic of stolen guns: more than 1.07 million firearms were reported stolen between 2017 and 2021. Almost all of those, 96%, were from private individuals.

Meanwhile, the report also documents a more than five-fold increase in the number of devices that convert a legal semi-automatic weapon into an illegal fully automatic one.  A conversion device was used in a mass shooting that left six people dead and 12 wounded in Sacramento last April in what officers described as a shootout between rival gangs.

The document also traces the rise of " ghost guns," privately made firearms without serial numbers that have increasingly been turning up at crime scenes around the nation. apnews.com  nytimes.com


UK's Retail Crime Surge
Policing chief says tackling retail crime is a priority

Policing minister Chris Philp has reassured the Federation of Independent Retailers (The Fed) that tackling retail crime is a priority for the government.

"As part of our political engagement strategy and commitment to raising awareness in the government of the scale of retail crime," national president Jason Birks wrote to Philp in December.

He invited the minister to attend a meeting of the All-Party Parliament Group on Retail Crime, of which the Fed is secretariat, to hear at first hand the true extent of such crimes and the devastating impact they have on victims.

In his letter, Birks called on Philp to consider installing a swifter, more purposeful reporting mechanism and to encourage a better response to retail crime from police forces.

He also called for victim impact statements to be made available to all if a case goes to court. "Retail crime is not a victimless crime, and all victims should be offered the opportunity to complete victim and business impact statements."

In his reply, Philp said: "I am committed to keeping our retail environments safe by driving down crime in retail settings, including violence and abuse towards shop staff.

"Shops are the lifeblood of our communities and neighbourhoods, and retail workers have the right to feel safe at work.

"I take the issue of violence and abuse against retail workers seriously and I am clear that any assault on any worker, particularly those providing a service to the public, is unacceptable." talkingretail.com


CA. Reacts to Mass Shootings - Retail Stores Included in Ban on Concealed Carry
Newsom, California lawmakers make another attempt to ban concealed guns in public spaces
The bill is the state's response to a U.S. Supreme Court ruling last year that took a wrecking ball to state laws limiting concealed carry gun laws, which Newsom called a "very bad ruling."

Though the court found states can't force people to demonstrate a need for a concealed weapon, it also said prohibiting guns in some sensitive public places is allowed and that states can create their own license requirements.

Senate Bill 2, by state Sen. Anthony Portantino, D-La Cañada Flintridge (Los Angeles County), would greatly expand the list of public places where guns cannot be carried, including bars or any place where alcohol is sold and consumed, childcare facilities, hospitals, public transportation, gyms, financial institutions, sports arenas, casinos, libraries, amusement parks, museums, zoos and public parks and playgrounds.

The ban on concealed weapons would also apply to any other private commercial establishment, unless the owner posts a conspicuous sign at the business entrance stating that license holders may carry guns. sfchronicle.com


Lowe's executive VP Seemantini Godbole on new anti-theft technology: This was a 'scrappy experiment'
Lowe's Chief Digital and Information Officer Seemantini Godbole joined 'The Big Money Show' to discuss Lowe's decision to create a new system intended to combat organized retail crime.

Police: 'High chance' of Hollywood mass shooting prevented

Brazen store theft on the rise in Western Australia

US: 104.3M Cases - 1.1M Dead - 101.4M Recovered
Worldwide: 675.7M Cases - 6.7M Dead - 648M Recovered

Private Industry Security Guard Deaths: 362   Law Enforcement Officer Deaths: 830

COVID Cases, Hospitalizations & Deaths

The Tide is Changing
The Bosses Are Back in Charge

CEOs are reasserting their authority now that workers are starting to worry about job security amid rising layoffs; 'this whole concept of working from anywhere went too far'

Many executives say that they are no longer scrambling to retain workers, after several years of doing whatever it took to keep people on staff. Pay increases are slowing. For some jobs, hiring is getting easier. Executives are seizing on this moment to streamline operations or cut projects, shedding staff that until recently they couldn't afford to lose.

Inside many organizations, there is a shift in sentiment, executives and their advisers say. Employers who felt they had less leverage in the tight labor market of the past couple of years say they have more power in negotiations with employees. Many feel less pressure to hire quickly to avoid losing a top candidate. Others are enforcing in-office attendance mandates that previously were ignored by some staffers.

"This whole concept of working from anywhere went too far," Mr. Ulbrich said. "I'm all into flexibility and all supportive that work and life has to find a flexible kind of partnership...but that doesn't translate into, 'Mondays and Fridays, I always work from home.' " wsj.com


Retail Pharmacies Still Reeling from the Pandemic
Longer wait times expected at retail pharmacies due to staffing shortage
Since the start of the pandemic and the COVID-19 Emergency Declaration, pharmacists and pharmacy technicians are being asked to do more than just fill prescriptions. During the winter there is more sickness, especially with the "tripledemic" - COVID, flu and respiratory syncytial virus (RSV). Meaning more people are relying on pharmacies.

"When you look at all the things going on behind that pharmacy counter, if you will, they're doing immunizations, they're doing testing, they're helping patients select over-the-counter products. Across the board, pharmacists and pharmacy teams have really become a significant piece with regard to healthcare," Beckner explained.

The need is for more technicians. According to the Bureau of Labor Statistics, in 2021 the national median salary for a pharmacy technician was $36,740. During the same time period, the median salary for a pharmacist was $128,570. abcnews4.com


Why companies like Disney are telling workers to return to the office

COVID state of emergency is ending - here's what it means for Californians

COVID-19 vaccines and treatments could go to private market this summer

Wisconsin Assembly puts bail constitutional amendment on April 2023 ballot

A proposed constitutional amendment that would make it harder for violent criminals to get out of jail on bail will go to Wisconsin voters in the April election - if passed, the governor is unable to veto the change.

The Republican-controlled Wisconsin Assembly gave a final, bipartisan push on Jan. 19 to a proposed constitutional amendment that would make it harder for violent criminals to get out of jail on bail.

The measure will now go before voters to be ratified in the statewide April 4 election. Its passage in the Assembly by a 74-23 vote marks the culmination of a push by Republican lawmakers to speed the amendment before voters.

The amendment would require a judge to consider a defendant's potential risk to public safety, including his or her criminal history, when setting bail. Currently, cash bail is set only as a means to ensure the person appears in court. Democrats have argued the amendment could create further inequity in the criminal justice system by allowing wealthy defendants to more easily get out of jail. pbswisconsin.org

New Mexico chief justice urges caution with bail law reform
The New Mexico Chief Justice highlighted advances in public safety resulting from changes to the state's pretrial detention system that started in 2017. Several bills this session propose to address the issue.

SANTA FE - New Mexico's top judicial official urged state legislators Tuesday to be cautious and remember the principle of innocence until proven guilty as they consider toughening the state's bail laws in response to violent crime.

"With the elimination of money-bail, judges now have the ability to assess dangerousness, something they could not do before," Bacon said. In Albuquerque and "Bernalillo County, this has resulted in the detention of over 3,000 defendants pending trial. Something that could not happen before."

Gov. Michelle Lujan Grisham and some legislators from both political parties have voiced support for changes that would make it easier to keep certain criminal defendants in jail while awaiting trial. Currently, people charged with a felony can be held without bond only if prosecutors can persuade a judge that no conditions of release would protect the public, or that a defendant is unlikely to appear in court. lcsun-news.com

Illinois Supreme Court sets March timeline for oral arguments in cash bail appeal
The Illinois Supreme Court is set to hear oral arguments in March to determine the constitutionality of provisions of the SAFE-T Act that eliminated financial conditions of release in the state.

An appeal to the Illinois Supreme Court regarding the constitutionality of a state law that would end cash bail appears to be at least two months away from resolution under a new timeline approved by the court Thursday.

The matter came to the Supreme Court in a Dec. 30 appeal by Raoul's office, following Kankakee County Judge Thomas Cunnington's decision that lawmakers overreached their constitutional authority in passing a measure to abolish cash bail in Illinois.

He also wrote that ending cash bail is an improper overreach by lawmakers, who have no constitutional authority to govern the administrative functions of Illinois courts due to the separation of powers. Bail, Cunnington wrote, has been held by the Supreme Court to be "administrative" in nature.

The ruling initially left the impending cash bail reform in limbo in at least 64 of Illinois' 102 counties that had joined the consolidated lawsuit. sj-r.com
 

AI-Based Management Software Monitoring Employees Stands Up In CA. Court
Can US Employers Recover Damages from Former Employees for 'Time Theft'?
The case of a Canadian company that recovered damages in court from a former employee accused of "time theft" raises the question of whether U.S. employers can similarly use electronic monitoring to persuade courts to award them damages. Several legal experts say that's usually not possible, but one attorney says U.S. employers can do so.

A former accountant at accounting firm Reach CPA on Vancouver Island in British Columbia was ordered to repay her former employer for time theft after tracking software indicated she had performed personal tasks while working, according to CBS News. The firm countersued her for time theft after she sued claiming she was wrongfully dismissed and that the employer owed her unpaid wages and severance pay.

Reach CPA added that TimeCamp is an artificial intelligence-based management software that tracks how a computer is used. "This software is not required for our remote workers and only a handful of employees use it," the firm said.

"Only after we noticed a number of red flags in the reporting of her time spent on projects did we investigate further," Reach CPA added. "We do not spy on [employees'] computers to make sure what they say is truthful. Over the course of the one month that the former employee had TimeCamp installed, she falsely reported over 50 hours she hadn't worked, the firm said.

U.S. Employers' Options for Time Theft

This type of counterclaim by an employer "would not get very far in the U.S.," said Zachary Busey, an attorney with Baker Donelson in Memphis, Tenn.

Employment laws across the U.S. usually defer to the employee when it comes to work time and payroll disputes, he said. "Wasting company time is often a very defensible ground for an adverse employment action, including termination, but it is rarely a basis for recovering wages or payments from an employee."

Giving Notice to Employees

Employers that electronically monitor workers should provide reasonable notice to employees that they have no expectation of privacy while using company hardware, software or network systems, Barron said.

Three states-Connecticut, Delaware and New York-regulate electronic monitoring by employers.

Moreover, National Labor Relations Board (NLRB) General Counsel Jennifer Abruzzo announced Oct. 31 that she will urge the NLRB to protect employees from intrusive electronic monitoring that interferes with their rights under the National Labor Relations Act.   shrm.org


CFOs to boost compensation by at least 3%
CFOs are planning to increase their compensation spend in 2023, with 86% of finance chiefs noting they plan to raise it by at least 3% year-over-year, according to a recent survey by Gartner.

CFOs are still facing a tight labor market in 2023. As CFOs weigh increased turnover and a more remote workforce, "they're thinking through, how do they use compensation as a lever to engage and retain talent across their workforce," said Alexander Bant, chief of research in the Gartner finance practice.

Only 5% of the 279 CFOs surveyed stated they planned to reduce their compensation spend in 2023, according to Gartner. cfodive.com


Hiring managers say 'time to fill' has slowed from 7 to 11 weeks
Hiring managers say it takes an average of 11 weeks to fill a vacant role, according to the Jan. 30 results of a Robert Half survey conducted in Q4 2022. That's up from seven weeks in 2021.

Employers are "scrambling" to staff up despite market volatility, the consulting firm said. More than half of the hiring managers responding to the survey said their employers anticipate adding new roles during the first half of the year; nearly 40% expect to hire for vacated positions.

Hiring managers indicated a disconnect between that urgency and the quality of their pipeline, however. Nine in 10 of the more than 2,000 respondents said it's challenging to find skilled professionals. hrdive.com


Trader Joe's objects to Louisville union vote - Third store to unionize
Trader Joe's has filed an objection with the National Labor Relations Board protesting the union election last week at Louisville, Ky., store.

The retailer claims that the union and its supporters acted unlawfully to discourage voting in the election, according to the filing.

According to the filing, union representatives and supporters urged workers at the Louisville store to transfer to another location if they did not support the union, and made "unwelcome, intrusive, harassing and intimidating comments" to workers. supermarketnews.com


Store Closures - Associate Safety - Consumers Hunkering Down
Northeast Braces for Bitter Cold as Wind Chill Could Hit Minus 65 Degrees in Some Areas

Parts of Maine expected to be the worst-hit, and record-breaking lows are forecast for New York City and Boston

Most of the cold weather will be felt Friday from Thursday night storms, and the most extreme conditions are expected Friday night into Saturday morning.

Wind chill from gusty northwesterly winds will make for the coldest weather in decades, the National Weather Service said. Wind-chill warnings and advisories are in effect for the Northern Plains as well as the Northeast. Record-breaking lows are forecast for the New York City, Boston and Providence areas. wsj.com

   NYC, Northeast bracing for 'dangerous' polar vortex, sub-zero temperatures


NRF Economist Says U.S. Recession Unlikely and Expects Slight Growth in 2023
A recession is unlikely and the economy is expected to see slight growth in 2023 as consumers continue to cope with inflation and high interest rates, National Retail Federation Chief Economist Jack Kleinhenz said today.

Amazon Pauses Expansion & Closing Some of Amazon Fresh Cashier-Less Convenience Stores 'Until it Finds the Right Recipe for Success'
You've got to wonder if shrink/theft is playing a role in decision

Amazon rapidly opening new 30 Whole Foods stores a year - Wants to Triple Size

McDonald's to open 1,900 new stores in 2023; eyes big growth in China

For those Ruth's Chris Fans - A NYC Staple Closing
Ruth's Chris Steak House closing Midtown location after 30 years

REI lays off more than 150 employees

FTC to Host Public Forum Examining Proposed Rule to Ban Noncompete Clauses


Quarterly Results

EZCORP Q1 pawn loans up 19%, total revenue up 20%

Skechers Q4 DTC up 10.8%, wholesale up 15.7%, total sales up 13.5%
Skechers Full Year DTC up 10.2%, wholesale up 23.2%, total sales up 18%

Amazon Q4 North America ales up 13%, Inter. down 8%, AWS sales up 20%, net sales up 9%
Amazon Full Year North America ales up 13%, Inter. down 8%, AWS sales up 29%, net sales up 9%

Starbucks Q1 comp's Up 5% Globally; Up 10% in U.S.; Up Double Digits Internationally, Excluding China, Consolidated Net Revenues Up 8%

Ingles Markets Q1 net sales up 7.3%

Google Q1 revenue up 6.1%

McDonalds Q4 Global comp's up 12.6%, U.S. up 10.3%, Inter. up 12.6%, Inter Licensed up 16.5%, Consolidated sales down 1%, Systemwide sales up 5%
McDonalds Full Year Global comp's up 10.9%, U.S. up 5.9%, Inter. up 13.3%, Inter Licensed up 16%, Consolidated sales flat, Systemwide sales up 5%

COLUMBIA SPORTSWEAR Q4 DTC up 5%, Wholesale up 2%, total net sales up 4%
COLUMBIA SPORTSWEAR Full Year DTC up 9%, wholesale up 12%, total net sales up 11%

Canada Goose Q3 DTC up 1.5%, Wholesale down 17.3%, revenue down 1.6%

Sally Beauty Holdings Q1 comp's up 1.1%, e-commerce up 14%, net sales down 2.4%

Apple Q1 revenue down 5%

Regis Corp. Q2 comp's up 4.5%, total revenue down 13%
 

Senior LP & AP Jobs Market

Sr Manager, Cybersecurity & Threat Detection job posted for Levi Strauss & Co.
The Sr Manager of Cybersecurity and Threat Detection plays an integral role in the protection of the brand and works directly with the Director of Cybersecurity and Threat Detection and the broader Global Information Security (GIS) team to establish and implement the cybersecurity strategy, priorities, and directives consistent with the vision of the CISO across Levi Strauss & Company (LS&Co.) globally. levistraussandco.wd5.myworkdayjobs.com
 

US DOJ applies carrot-and-stick approach to Foreign Corrupt Practices Act policy
Corporations (and their CISOs) that discover wrongdoing or corruption within their own business are well-advised to self-report such activities and cooperate with prosecutors. The stakes are high for those who don't.

The US Department of Justice (DOJ) has taken a carrot-and-stick approach to its corporate enforcement policy in regard to the Foreign Corrupt Practices Act (FCPA) in an effort to entice companies to self-report when in violation of the FCPA. Assistant Attorney General Kenneth A. Polite, Jr., shared the 2022 success of the Criminal Division of the DOJ in its pursuit of corrupt and criminal activities within corporations that "threaten the public safety and national security, [and] wrongfully divert money into the pockets of criminal actors" at a mid-January event at Georgetown University's Law Center.

CISOs and CSOs are well-positioned to spot anomalies

This is of import to CISOs and CSOs, as their teams are often in a position to observe signs of anomalous behavior within their own infrastructure and the changes within the Enforcement Policy clearly reward those who self-report and cooperate. Indeed, Polite emphasized that the DOJ's job is not just the prosecution of crime, but also to deter and prevent crime. The DOJ needs "corporations to be our allies in the fight against crime," Polite said. csoonline.com

   As Reported on the Daily on Jan. 18, 2021: Read more here


Lawmakers Still Plan Legislation to Ban TikTok in the U.S.
Republican U.S. lawmaker meets with TikTok, but unpersuaded
U.S. Republican Representative Mike Gallagher met with TikTok on Wednesday about the Chinese-owned short video app's U.S. data security plans but still plans to seek to ban TikTok in the United States, a spokesperson for the lawmaker said.

Gallagher, the Republican chair of a U.S. House of Representatives select committee on China, met with TikTok officials led by TikTok's head of public policy for the Americas Michael Beckerman. The lawmaker "appreciated their time but found their argument unpersuasive," Gallagher spokesperson Jordan Dunn said.

Gallagher "still plans to introduce his legislation with Rep. (Raja) Krishnamoorthi in the coming weeks," Dunn said.

Beckerman said in a statement to Reuters TikTok looks "forward to learning more about Rep. Gallagher's specific concerns that are not addressed by this comprehensive plan."

TikTok hopes to give Gallagher another briefing "as it was difficult to do a substantive deep dive on a national security proposal that has been in the works for two years during a single short meeting," he added.

TikTok's presentation "Protecting U.S. National Security Interests" - which has been viewed by Reuters - offers a detailed look at the app's efforts to demonstrate the data security for TikTok's more than 100 million U.S. users.

The U.S. government's Committee on Foreign Investment in the United States (CFIUS), a powerful national security body, in 2020 ordered Chinese company ByteDance to divest TikTok because of fears that user data could be passed onto China's government.

CFIUS and TikTok have been in talks for more than two years aiming to reach a national security agreement. reuters.com


T-Mobile CEO spins recent breach, says its cybersecurity chops 'showed up'
"Our systems and policies protected the most sensitive kinds of customer data," Mike Sievert said on an earnings call. "We take this issue very seriously."

Top brass at T-Mobile, despite a string of security incidents, insist the company's investments in cybersecurity are paying off.

"The investments we've made in 2022, including in our cybersecurity capabilities, showed up in a critical way a few weeks ago," CEO Mike Sievert said Wednesday during the company's 2022 Q4 earnings call.

"After identifying a criminal attempt to access our data through an API, we shut it down within 24 hours. And more importantly, our systems and policies protected the most sensitive kinds of customer data from being accessed," Sievert told analysts.

The recent breach, the second of two major attacks in the last 15 months, began on or around Nov. 25 and went undetected for almost six weeks, exposing personal data on about 37 million customers. cybersecuritydive.com


98% of orgs have at least one vendor that's had a breach in the last two years
New research from SecurityScorecard, the global leader in cybersecurity ratings, and the Cyentia Institute, an independent cybersecurity research firm, analyzed SecurityScorecard's data from over 230,000 organizations to provide insights on this important topic.

One striking finding that emphasizes the importance of third-party risk management: 98% of organizations have at least one vendor that's had a breach in the last two years. While this statistic doesn't mean that these breaches impacted all connected organizations, it does highlight the scope of indirect exposure to risk.

How many third- and fourth-party relationships do organizations have?

The typical number (peak density) of third-party relationships is about 10, while three-quarters of organizations have less than 30. Only 4% of the analyzed firms have over 100 direct vendor relationships.

When it comes to fourth-party relationships, based on third parties observed via Automatic Vendor Detection, the typical organization has indirect relationships with 60 to 90 times the number of fourth parties.

To grasp the importance of fourth-party risk management, the research focuses on uncovering the most common "vendors of your vendors." While only a handful of third-party vendors are used by more than 50% of organizations, that number increases to 99% for four parties, which means that most organizations are no more than two steps removed from each of the top 50 vendors.

So, does the number of vendor relationships impact security risk?

Answering this question is difficult without generalizing. Instead, the research focuses on whether less secure organizations have more vendor relationships. The answer to that question is YES.

Read the full report here to learn more about these and other insights from this research, along with steps your organization can take to minimize potential risk stemming from your third or fourth parties. securityscorecard.com


Insider Threat Attack Caused $4 Billion in Market Capitalization Loss
From IP Theft to Extortion to Posing as an Anonymous Whistleblower & Foiled By a Simple Power Outage

Former Ubiquiti senior developer pleads guilty to inside threat attack causing loss of $4B in market capitalization & $2M extortion attempt

Ubiquiti has provided advanced data-driven software products based on our proprietary artificial intelligence (AI), machine learning (ML) and natural language processing (NLP) technologies serving the automotive supply chain, automotive retail & repair, as well as the manufacturing and healthcare sectors. ubiquiti.com techtarget.com

DOJ: Former Senior Developer Of Technology Company Pleads Guilty To Stealing Confidential Data And Extorting Company For Ransom

Defendant Also Caused the Publication of Misleading News Articles About the Company's Handling of the Breach the Defendant Perpetrated, Resulting in Loss of Over $4 Billion in Company's Market Capitalization

NICKOLAS SHARP pled guilty today in Manhattan federal court to multiple federal crimes in connection with a scheme he perpetrated to secretly steal gigabytes of confidential files from a public New York-based technology company where he was employed ("Company‑1"). While purportedly working to remediate the security breach for Company-1, SHARP extorted the company for nearly $2 million for the return of the files and the identification of a remaining purported vulnerability. SHARP subsequently re-victimized his employer by causing the publication of misleading news articles about the company's handling of the breach that he perpetrated, which were followed by the loss of over $4 billion in Company-1's market capitalization. SHARP pled guilty to intentionally damaging a protected computer, wire fraud, and making false statements to the Federal Bureau of Investigation ("FBI").

Company-1 was a technology company headquartered in New York that manufactured and sold wireless communications products and whose shares were traded on the New York Stock Exchange. NICKOLAS SHARP was employed by Company-1 from in or about August 2018 through on or about April 1, 2021. SHARP was a senior developer who had access to credentials for Company-1's Amazon Web Services ("AWS") and GitHub Inc. ("GitHub") servers.

A case worth reading for those following insider threats. The developer just wouldn't stop even after the FBI raided his home: Continue Reading


White House Mulls Banning Huawei's Access to US Technology

Phishers Trick Microsoft Into Granting Them 'Verified' Cloud Partner Status

ORC Stings in Albuquerque Nabbing Theft Suspects
Albuquerque, NM: Albuquerque sting puts a dent in 'Organized Retail crime'
It took an hour of waiting to get the first one. The suspect exited out the side door of a Kohl's store with a black duffel bag full of clothing and shoes. But before he could make a getaway, he was apprehended by patient Bernalillo County Sheriff's Office deputies, who pounced and quickly placed him in handcuffs. Within another two hours, deputies nabbed five more accused shoplifters outside the store and a nearby Home Depot in the northwest section of Albuquerque.

More arrests were expected later Thursday as members of several law enforcement agencies took part in a citywide operation attacking what lawmakers and retailers say is an increasingly worrisome problem throughout New Mexico. They call it "organized retail crime" - thieves who brazenly steal what they want from stores and simply walk out the door, flaunting a seeming invincibility as they leave. Some criminals work as part of highly disciplined packs in the thefts. Others, operate solo, like Kohl's suspect Eli Montaño is accused of doing, sometimes innocuously slipping out emergency exit doors with stolen goods in a hand basket.

The problem has reached such epic proportions that lawmakers are about to consider two bills that create tougher penalties for shoplifting. Rob Black, president and CEO of the New Mexico Chamber of Commerce, said in an interview Thursday such crimes are "a growing threat that is costing our retail businesses. We are seeing crimes that we once thought were petty theft turn into something that is more organized, with repeat offenders becoming more brazen and using firearms more often. We need better tools to address those problems." He praised Thursday's multi-agency sting operation in Albuquerque, noting it's one way to combat the problem. "That's how we get things done - by working together," he said.  santafenewmexican.com


Pittsburgh's Biggest Fence Pleads Guilty
DOJ: Owner of Ninja Electronics Retail Stores Pleads Guilty to Fraud and Money Laundering Charges
PITTSBURGH, PA - A resident of Pittsburgh, Pennsylvania, has entered pleas of guilty to three separate criminal charges arising out of his ownership and operation of a series of electronics reseller stores in the greater Pittsburgh area. Milton I. Barr, age 36, entered pleas to separate counts charging him with Criminal Conspiracy, Mail Fraud and Money Laundering.

Barr was, during the time period of the Indictment, the owner / operator of Ninja Electronics, a series of retail stores that was initially in the business of selling used and refurbished electronic items. The evidence presented to the Court showed that during the period January 2016 through August 2018 Barr oversaw an operation that generated substantial revenue by purchasing health and beauty aids such as Crest White Strips, cosmetics, razor blades, hair care products and similar items, as well as over the counter medications such as name brand cough and cold medications, pain relievers, heartburn treatments and the like. Barr's employees purchased these items from sellers who walked into his stores from off the street. The evidence showed that these walk-in sellers were invariably drug addicts who had shoplifted the items from local drug stores, grocery stores and retail chains. The records in the case showed that these addict sellers came into Ninja Electronics frequently, often multiple times in the same day or multiple times in the same week, offering items for sale to Ninja that were purchased by Ninja for pennies on the dollar of their original price. Ninja in turn took these stolen goods, always new and in the box, and then offered them for sale on websites like Amazon, shipping them to their ultimate purchasers through the United States mail. The evidence showed that in only one of the multiple Ninja bank accounts Barr received in excess of $540,000 in payments from Amazon during the less than three-year indictment period.

The evidence showed that Barr's stores operated on a kind of "Don't ask, Don't tell' policy. That is, employees were instructed not to ask the drug addict sellers where they obtained the merchandise they were selling, and if a seller told an employee that the item had been shoplifted employees were instructed not to buy the item. However, it was common knowledge among all the employees that the walk-in sellers were stealing the merchandise that Ninja was buying.

The Court set sentencing for Barr on May 17, 2023. The law provides for a maximum sentence of up to five years for the conspiracy count, up to 20 years on the wire fraud count and up to ten years on the money laundering count. justice.gov


Los Angeles, CA: Suspects flee after security guard interrupts smash-and-grab robbery at Dior pop-up on Melrose
A smash-and-grab robbery at a pop-up Dior store on Melrose Avenue was interrupted by a security guard Thursday morning, authorities said. Multiple suspects used a large rock to smash the store's window and made entry around 3:30 a.m., according to the Los Angeles Police Department. Additional details about the interaction with the security guard were not available, but police say the suspects managed to take off with a few handbags. All of the suspects fled on foot and remain outstanding. Suspect descriptions were not available. Police say they haven't yet viewed surveillance footage. abc7.com


Sioux City , IA: Woman arrested in Sioux City after alleged explosion used in shoplifting thefts
A woman has been arrested for allegedly stealing from and aiding a second suspect in setting off an explosive inside a Sioux City business. Police are also looking for a second suspect. According to court documents, Jessica Katz, 40, of Omaha, went to the Sioux City Scheels with another woman on October 26, 2022. Court documents allege that Katz and the second woman stole more than $500 in merchandise and set off some sort of explosive inside the store which resulted in more than $3,000 in damage. Documents state that Katz and the other woman arrived at the scene in a silver Mercury Mariner just after 7 p.m. and began making their way around the store grabbing items from different sections of the store such as pet harnesses, clothes, shoes, and a BB gun. While the two women were gathering items, the second woman went out to the Mariner before coming back inside. After collecting a variety of items, while Katz was organizing the merchandise they grabbed, the second woman allegedly grabbed a lighter and a device with a fuse out of her pocket, lit the device, threw it onto a shelf, and walked away. The device exploded shortly after, court documents say. The two women left the store and drove away. The amount stolen is estimated at $562.97, and the damage caused is estimated to be $3,412.14. The Omaha PD Gang Unit picked up Katz on 1/25/23 on her felony warrants out of Woodbury County. She was just transferred to Woodbury County Jail today. siouxlandproud.com


Millburn, NJ: Brooklyn Man Steals $6,000 of Apple Store Merchandise from the Mall at Short Hills
Millburn officers Griffin, Lyons, Jezewski and Salemi reported to the Mall at Short Hills on a report of a theft at the Apple Store. Associates reported that a Hispanic male wearing black sweatpants and a puffy vest stole $606.90 of merchandise from Apple and left the store without paying. Lyons, Griffin and Salemi found a suspect matching the description in the parking lot. They stopped the driver, Giorgi Mtchedlidz, age 41, of Brooklyn, and found over $6,000 of stolen Apple products in it. Mtchedlidze was charged with shoplifting, receiving stolen property, possession of drug paraphernalia and later released on his own recognizance. tapinto.net


Louisville, KY: Nearly $5K worth of LEGOs stolen from St. Matthews store; 2 women, 3 juveniles arrested
Five people were arrested Sunday after nearly $5,000 worth of LEGOs were stolen from a Louisville mall. It happened a little before 8 p.m. on Sunday at the LEGO Store in Oxmoor Mall, according to Louisville Metro Police. LMPD officers were called to the store while police say 35-year-old Sierra Davidson and 19-year-old Je'Vaeh Kinslow were actively removing LEGOs from the shelves. While on their way, police received an update from the store that Davidson and Kinslow had made their way out of the store and the mall with baskets full of merchandise, worth $4,800, and were loading them into a van. wlky.com


Gun Store Robbery Crew Busted & One Gets 12 Months
DOJ: Massachusetts Man Sentenced to 12 Months for Conspiracy to Steal Firearms
CONCORD - William Guerrero, 21, of Brighton, Massachusetts was sentenced to 12 months in federal prison today for conspiring to steal firearms from a New Hampshire Federal Firearm Licensee.

On January 23, 2022, Guerrero drove a stolen vehicle into the parking lot of Shooters Outpost, a Federal Firearm Licensee in Hooksett, New Hampshire. Surveillance footage shows Guerrero and three other men attempting to get into the store by smashing a window by the rear door. The previous day, using the same stolen vehicle, three of the four men attempted to gain access to three other Federal Firearm Licensees in New Hampshire. Following his arrest, a search of Guerrero's telephones revealed a conversation in which he and his co-conspirators discussed breaking into gun stores. justice.gov


Forsyth County, GA: Couple face theft charges in shoplifting incidents
Forsyth County Sheriff's deputies arrested two suspects in connection with a series of thefts at the Walmart on Browns Bridge Road in late December. Delveccho Waller, 24, of Gainesville, and Alexis Aldaco, 22, of Lula, face felony charges for stealing nearly $3,000 in merchandise from the store on Dec. 19, 27, 29 and 31. A third suspect, a 22-year-old Hoschton woman, is also being sought as an accomplice in the thefts. A loss prevention employee for the store told deputies Jan. 1 that Aldaco, Waller and the third suspect shoplifted items totaling $2,744.63.  appenmedia.com


Montgomery County, TX: Two people allegedly steal from Ulta, then lead police on pursuit

Pinellas County, FL: Seminole man stole 45 liquor bottles worth $1.2K from Winn-Dixie

Walnut Creek, CA: 2 arrested after thousands of dollars worth of alcohol, merchandise stolen in Walnut Creek

The Villages, FL: The Sumter County Sheriff's Office is seeking 2 women who stole nearly $700 worth of merchandise from Walmart at Buffalo Ridge Plaza

Waynesboro, PA: Police looking to identify Lowe's $500 power tool Shoplifter