NRF PROTECT Session Roundup: Day 3 | June 6

By Amber Bradley, Owner, Calibration Group

As consistent as the Queen Mary in Long Beach Harbor (docked there since 1967), NRF PROTECT attendees can count on many reasons to shake off that post "networking event" fog to join colleagues for a packed day of learning and valuable takeaways for the final day of this year's conference.

Thursday morning's keynote, "Hacking Retail," presented by Ted Harrington, Executive Partner, Independent Security Evaluators, an elite security researcher who was the first to exploit the iPhone. Ted's message included busting misconceptions about overall infrastructure security addressing concepts like information leakage, functionality abuse and misconceptions like believing, "no one would ever think to do that."

Ultimately, Ted's call to action was to challenge assumptions to ensure you're asking what if and finding different ways to solve problems. Couldn't make the conference but loving Ted's message? Get a free signed book from Ted Harrington by clicking here.

The session line-up was packed with phenomenal speakers and experts and you can check out the full list here. Today's session round-up summarizes two key sessions:

- "Start with empathy: Handling vulnerable and homeless people" presented by Hugo Cortez, field security manager, McDonald's Corp, Octavio Jara, Sr. Manager of Security, Edward Turner, Director of Protection, WPV & Fraud, Staples, moderated by Susan Reda, VP of Education Strategy, NRF

Summary: McDonald's and Staples experts covered how important it is to change your mindset when it comes to dealing with the homeless population. It's critically important to deal with these potentially tense situations by leading with empathy and respect. Each professional explained the importance of consistent training for frontline employees on principles of empathy, conflict prevention, and de-escalation.

Key takeaways from the session includes:

• McDonald's provided actual examples and key strategies they use to help train their employees on interacting with the homeless and preventing conflict including utilizing Amber Bradley's company, the Calibration Group, for consistent awareness training. Contact Calibration Group here.

• On the technology front, there were many tools mentioned that are extremely helpful in interacting with this population include:

  • LiveView Technologies for camera towers and classical music playing in the parking lots. Contact LVT here.

  • Amphion Integrated Solutions provides a technology that locks the restaurant down in the event of a dangerous situation with just the touch of one button. Contact Amphion here.

  • Virtual guards to help protect the restaurant and contact law enforcement when necessary provided by Interface.

• Staples provided specific no-cost strategies including turning off the WiFi during off hours and partnering with your local health department or homeless shelter to ensure a productive relationship for mutual resources

- "Lessons from ten years of retail cybersecurity collaboration" presented by Diane Brown, VP of IT Risk Management for ULTA Beauty, Aaron De Runtz, Sr. Director, Cybersecurity and Technical Infrastructure, Peet's Coffee, Cy Fenton, Managing Consultant, Proximus Consulting Group and Adam Isles, Principle and Head of Cybersecurity, The Chertoff Group

Summary: This group of cyber experts discussed the aftermath of the Target data breach, how that impacted retail, and how retail changed and what's next for upcoming cyber risks. Ransomware and data extortion are top of mind for retailers standing in the cyber security gap against the hackers. Panelists also talked about ensuring you know the complexities of your internal systems because that is where organizations are potentially vulnerable. Another major point is to ensure your organization is resilient and make sure the "blast zone" is the smallest it can be.

Key takeaways from the session includes:

• Hope and luck are not good plans for cyber protection

• Don't forget about the people parts of the cyber equation

• Understand all the systems within your organization - including 3rd parties

• Identify and measure the resiliency of the key segments of your organization

NRF PROTECT's proverbial mic drop was its closing session featuring ESPN analyst Herm Edwards! Herm talked, "Playing to win the game" inspiring the audience to shape your career with the focus of elite athletes and by making something out of every day.

There you have it from Long Beach and this year's NRF PROTECT! Meet up for more valuable content in 2025 in Grapevine, Texas at the Gaylord, June 23 - 25, 2025!

40% of Americans Admit to Shoplifting
Survey: Shoplifting fairly common among Americans
A large percentage of American adults have admitted to stealing merchandise from a store.

That's according to a new survey Express Legal Funding, conducted with SurveyMonkey, which found that 40% of respondents admitted to having shoplifted at least once, indicating that theft is a fairly common behavior among Americans. Two-thirds (66%) of respondents in all age groups reported knowing someone who has shoplifted before.

The survey found that women shoplift more than men, with 43% of women reporting prior shoplifting, while only 37% of men said they shoplifted before. Women are consistently more likely than men to know someone who has shoplifted, with a difference of roughly 10% in each region.

The likelihood of shoplifting decreases with age, with the 18-24 age group reporting the highest likelihood of shoplifting in the next two years, while the 55+ group shows the lowest.

As far as motivations for shoplifting, financial hardship (52%) was cited as the most prevalent and consistently cited primary reason for shoplifting across all demographics. Seeking a "high" or thrill from stealing was reported as the main factor for shoplifting by 19% of the respondents.

According to the survey, the most commonly cited reason for hesitation towards retail theft across all regions is the belief that shoplifting is morally wrong or against their religion (70%), followed by the fear of getting in trouble with the police.

Express Legal Funding and SurveyMonkey interviewed 535 consumer participants for the survey. chainstoreage.com


Pharmacy Robberies Plummet After New Time-Delayed Safe Requirement
Toronto, Canada: Pharmacy robberies down 82% thanks to new tech
Pharmacy robberies in the city are down 82 per cent in 2024 compared to this time last year thanks to new technology, Toronto police say. Last year, a new mandate kicked in ordering all pharmacies to have time-delayed safes, which only open after a set-amount of time has passed after being unlocked. They are used to secure narcotics such as oxycodone, morphine, and codeine. Now, Toronto police, the Ontario College of Pharmacists and the Ontario Pharmacists Association are celebrating the decrease in pharmacy robberies across the board. In Toronto, there have been 10 robberies so far this year, compared to 60 in the same time period in 2023.

"Pharmacy robberies were very lucrative. Each pill obtained was sold for profit, and there was an obvious demand," said Toronto police Insp. Joseph Matys at a news conference on Wednesday. "Working together with our residents and our law enforcement and industry partners, we can make it harder for criminals to victimize our communities and ultimately make a safer and more secure Toronto for everyone."

Matys said criminals would often use stolen vehicles during pharmacy robberies, which contributed to the auto theft crisis in the region. They would also put customers, staff and pharmacists in danger and would sell the drugs obtained in the illegal market, also adding on to the opioid crisis, he said. He confirmed police have received reports that criminals have left mid-break-in after realizing they can't open the safe quickly. "Criminals are after an easy target, and once they find out that these pharmacies have time-delayed safes, they go off," he said. More than 4,900 pharmacies now carry the technology in Ontario.  ca.news.yahoo.com


Retail Body Cams Make More Headlines
Will Body Cameras Scare Shoplifters?
TJX Companies has started outfitting security guards at some of its stores in the U.S. with police-type body cameras as part of its ongoing efforts to counter a rise in shoplifting incidents.

"When somebody comes in, it's sort of - it's almost like a de-escalation where people are less likely to do something when they're being videotaped," CFO John Klinger said last month on TJX's first-quarter analyst call.

Criminologists told CNN that body cameras can aid in investigations over in-store incidents, also including accusations of racial profiling or wrongful arrests for shoplifting. Body cameras could also help identify shoplifters, although having to get close to the suspect to secure a recognizable image carries risks for security personnel. Criminologists were more skeptical that body cameras would deter crime since shoplifters already assume they're being filmed by standard security cameras.

The Retail, Wholesale and Department Store Union (RWDSU) is pushing for the New York Senate to pass the Retail Worker Safety Act that would require retailers to have written workplace violence prevention programs, including guidance on de-escalation tactics and active shooter training. Large retailers must install panic buttons throughout stores under the legislation.

Speaking to CNN, Stuart Appelbaum, the president of the RWDSU, expressed concerns about the information body cameras are collecting and whether they could be employed in union-busting efforts. He said, "Employees feel like they are under surveillance."  retailwire.com

 
UK: Is the Lack of Prosecution Fueling Shoplifting Surge?
Only 14% of Shoplifting Cases in the UK Result in Prosecution
Almost 90% of shoplifting offenses in the UK are not being prosecuted, raising concerns among retailers and the public alike. New figures from the Home Office reveal that only 14% of shoplifting cases across England and Wales resulted in a charge or summons in the year to September 2023. This statistic underscores a growing issue within the criminal justice system and highlights the challenges faced by police forces in tackling retail theft.

Shoplifting is not just a petty crime; it has significant repercussions for businesses and communities. As shoplifting incidents increase, retailers are left to deal with the financial losses and operational disruptions. The Home Office data indicates a 25% rise in shoplifting offenses compared to the previous year, signaling a trend that requires urgent attention and effective solutions.

The Shocking Rise in Shoplifting: Analyzing the Data

The Home Office figures paint a stark picture of the shoplifting landscape in the UK. In the year to September 2023, police recorded 264,000 shoplifting offenses, a substantial increase from the previous year. Despite this surge, only 14% of these cases resulted in charges or summons, leaving the vast majority of offenders unpunished.

This low prosecution rate is concerning, especially when compared to other types of crime. The data shows that shoplifting is often treated as a low-priority offense, with limited resources allocated to its prevention and prosecution. Factors contributing to this trend include understaffed police forces, the complexity of gathering sufficient evidence, and the perception that shoplifting is a minor crime.

However, the reality for retailers is quite different. Shoplifting leads to significant financial losses, increased security costs, and a stressful work environment for employees. The British Retail Consortium (BRC) has highlighted the rampant nature of retail theft, emphasizing that offenders often escape without consequences. The BRC's chief executive, Helen Dickinson, stated, "It is vital that police forces investigate and the criminal justice system acts to remove persistent offenders from our stores and streets."

The Impact on Retailers: A Growing Concern - Authority Responses: Police and Government Actions - Strategies to Combat Shoplifting:  retail-merchandiser.com


Shoplifting 'Creeping Into the Middle Class' - Is Self-Checkout Fueling It?
Anonymous commentary: I'm a middle-class shoplifter - and here's why I'm happy to confess it
The first time I did the dodgy in the supermarket was a few years ago, when I took the tag off the organic leeks and pretended they were normal leeks at the checkout. I had a buzz on realising I was cheating the system and taking something from them, a behemoth supermarket giant. I realise it's not high stakes, but now I regularly shoplift.

The tendency for people like me to take what they can hasn't gone unnoticed - M&S chair Archie Norman has claimed faulty self-checkouts are behind shoplifting "creeping in" among the middle classes.

The former MP said customers were tempted to leave without paying when the machines failed to scan products. "With the reduction of service you get in a lot of shops, a lot of people think: 'This didn't scan properly, or it's very difficult to scan these things through and I shop here all the time. It's not my fault, I'm owed it'," he said. He's right.

You see, I don't even see it as shoplifting: people like me don't do that. I'm a nice middle-class woman with young children! I am entirely unextraordinary - we're not on the breadline, but food is still expensive. We are the very definition of the "squeezed middle".

I realised how easy it was when I downloaded an app from a leading supermarket where they trust you to do everything yourself. What is this magical thing? You scan the items, bag them, and then just check yourself out. I didn't even consciously steal things at first, it was a genuine mistake - in a haze of walking round the supermarket with "two-under-two". The first time I realised I'd done it I was mortified, and then a little bit excited. But I didn't stop myself from doing it again. independent.co.uk


$5 Million Dollar Grant to Fight Retail Theft
Palm Springs, CA: PSPD Awarded Grant To Help Tackle Retail Theft
The Palm Springs Police Department is asking for business owners help to combat retail theft. After receiving a grant of close to 5 million dollars, they will develop the tools to do just that.

They're asking business owners to take a survey, which can be found on all of PSPD's social media page, which gathers basic information about the owned business, including information, for example, if they've ever been victim to a theft or robbery.

All this, apart of the grant, which helps PSPD determine what areas might need extra security. nbcpalmsprings.com


Seal Beach Police Overall crime down 4% in 2023

Adams admin asks federal judge to suspend solitary confinement ban in NYC jails
 

Some Small Businesses Couldn't Survive a Cyberattack
78% of SMBs fear cyberattacks could shut down their business
94% of SMBs have experienced at least one cyberattack, a dramatic rise from 64% in 2019, according to ConnectWise. This increase in cyberattacks is exacerbated by the fact that 76% of SMBs lack the in-house skills to properly address security issues, increasing demand for the expertise and services of MSPs.

Rising cyberattack frequency on SMBs

The growing wave of cyber incidents is eroding SMBs' confidence in their ability to protect their businesses with a staggering 78% concerned that a severe cyberattack could drive them out of operation.

This escalating apprehension is pushing SMBs to reevaluate and strengthen their cybersecurity strategies, recognizing the urgent need for proactive measures to safeguard their data, maintain customer trust, and drive innovation.

The data reveals that in addition to the substantial increase in frequency, 56% of SMBs have already faced at least one cyberattack this year, and 89% fear they will be targeted within the next six months. Organizations are feeling the impact of these incidents.

99.5% of organizations have experienced repercussions from cyber incidents, with 38% citing the cost and effort of dealing with these issues as the most common impact. Compared to 2019, 64% more of SMBs report experiencing damage to company reputation as a result of increased frequency of cyberattacks.

Despite these challenges, SMBs that work with MSPs report slightly lower impacts in terms of company reputation damage, monetary costs of dealing with the attack, and negative publicity compared to those that do not use an MSP. Although partnering with an MSP may not decrease the frequency of cyberattacks, it can significantly diminish the effectiveness and consequences of these attacks, providing a valuable layer of defense. helpnetsecurity.com


Avast Q1 2024 Threat Report
90% of threats are social engineering
Jakub Kroustek, Malware Research Director at Gen, discusses the Avast Q1 2024 Threat Report. The report highlights significant trends and incidents in cybersecurity. Key findings include:

Surge in social engineering attacks: Nearly 90% of threats blocked were social engineering-based, with scams and phishing on the rise, particularly utilizing deepfake technology and hijacked YouTube channels.

Lazarus APT campaign: The Lazarus Group's sophisticated campaign targeted individuals in Asia with fake job offers, exploiting a Windows driver vulnerability to maintain persistent access.

Increase in mobile threats: Over 90% of mobile threats were scams, with notable threats including adware, banker malware like MoqHao, and biometric data theft attempts.

Ransomware activity: LockBit ransomware made headlines with a law enforcement takedown, though it quickly resurfaced. Avast released decryptors for new ransomware strains like HomuWitch and Rhysida.

YouTube as a threat vector: YouTube was exploited for phishing, malvertising, and crypto scams, but Avast protected millions of users from these threats. helpnetsecurity.com


Cybersecurity Partnership Between Feds & Private Sector
Panel advises CISA on how to improve industry-government collaboration project

The adopted recommendations include not getting waylaid from the central mission of the Joint Cyber Defense Collaborative.

A Cybersecurity and Infrastructure Security Agency initiative to enhance collaboration between government and industry should avoid policy distractions, establish a physical meeting space and create a "smart Rolodex" for identifying potential partners, according to a CISA advisory panel.

CISA's Cybersecurity Advisory Committee on Wednesday adopted recommendations for improving the Joint Cyber Defense Collaborative (JCDC), a three-year-old project to share cybersecurity data between government and the private sector that has faced persistent complaints among some that the initiative has featured lackluster information sharing, a decline in participation and organizational problems.

Before producing its recommendations, the advisory panel spoke to a "good subset" of the more than 300 partners in the joint collaborative project, said Ron Green, chair of the subcommittee that produced the report and Mastercard's former chief security officer and a current fellow at the company. cyberscoop.com


Webinar: Exposure management and your attack surface

Ransomware Attack Disrupts Operations Across London Hospitals