D&D Daily e-Newsletter

Web version / Mobile version


10/28/21	LP, AP & IT Security's #1 News Source	D-Ddaily.net

Northeast Regional LP Conference
Nov. 3

TMA's 2021 OPS-TECH
Nov. 7-11

CLEAR Conference
Nov. 16-18

ISC East
Nov. 17-18

2022 Events

RLPSA Conference
April 10-13

NRF Protect 2022
June 21-23

See More Events

Check out the Daily's Exclusive Reports

Q4/2020 Retail Fatalities Report

D&D Daily's 5th Annual Holiday Week Retail Crime Report

Q3/2020 Retail Fatalities Report

Q3/2020 Robbery Report

Q3/2020 ORC Report

See more reports

2021 National Retail Security Survey

2020 NRSS Survey

2019 NRSS Survey

2018 NRSS Survey

2017 NRSS Survey

2016 NRSS Survey

2015 NRSS Survey

NRF's 2021 Top 100 Retailers

Vector Security Networks Division President David Fisher Appointed to Loss Prevention Foundation (LPF) Board

Fisher to assist in governing and providing strategic direction for the Foundation.

PITTSBURGH, October 28, 2021 - David Fisher, Division President, Vector Security Networks, has been appointed to the Board of Directors of the Loss Prevention Foundation (LPF).

In this role, Fisher, along with other board members, will assist in governing and providing strategic direction for the Foundation, which is an international leader in educating and certifying retail loss prevention and asset protection professionals.

The Foundation administers professional credentials for LPQualified (LPQ) and LPCertified (LPC), which focus on advancing individual industry knowledge, growing careers, and elevating the profession.

Read more here

Jonathan Nix named AP Manager of Investigations and Supply Chain for Belk
Before being named AP Manager of Investigations and Supply Chain for Belk, Jonathan spent two years as an Investigator for Spartanburg County, South Carolina. Prior to that, he spent more than 17 years with TJX Companies as National Task Force Senior Investigator (ORC). Earlier in his career, he held roles with the Landrum, South Carolina Police Department, Walmart and Target. Congratulations, Jonathan!

See All the Executives 'Moving Up' Here | Submit Your New Corporate Hires/Promotions or New Position

In Case You Missed It

Over a Fourteen Year Period, The Text Book Hasn't Changed a Bit

D&D Daily Confidential Benchmarking Survey

Senior LP Pyramid Head Reporting Structure Survey

Conducted November 2020 - 63 retailers responded anonymously and here's the results:

*Reporting into:*
CEO CEO - 3.5%	Finance CFO - 21.1% SVP Finance 2% VP Audit - 2% VP ER - 3.5% Total - 28.6%	Operations CAO - 3.5% COO - 5.3% EVP - 2% SVP OPS - 19.3% VP OPS - 14% Total - 44.1%	Legal CLO - 10.5% CSO - 3.5% Total - 14%	HR CHRO 5.3% SVP HR - 3.5% Total 8.8%	Other 1%

Yrs of Retail LP Experience
10+ Years: 98%
5-10 Years: 2%

Current Job Title?
Director LP/AP/Risk Management: 55%
VP LP/AP/Security/Investigations/Risk Mgmt: 24%
Senior/Corporate LP/AP Manager: 15%
Regional LP Manager: 2%
Other: 4%

Retailers Responding
Grocery: 14%
Specialty Apparel: 12.3%
Restaurant: 12.3%
Big Box Mass Merch: 12.3%
Specialty Other: 8.8%
Jewelry: 7%
Drug Store: 3.5%
e-Merchant: 1.8%
Home Goods: 1.8%
Other: 26.3%

2007 Reporting Study Mirrors 2021 To a Tee
With 44% Reporting to Ops & 29% Reporting into Finance
Everything changes but leadership and people rarely do! Harvard business school teaches you that - Here's the Proof!

In a 2007 detailed 'LP Reporting Structure' study of the NRF's Top 100 Retailers
Completed by our office for one of the big 4 accounting firms we found the following:

Reporting into:

CEO
7

Finance
29%

Operations
45%

Legal
7

HR
7

Other
5 Would Not Participate

Need a validated separate copy to distribute? Click here and we'll send you one.
Which will include the 2007 detailed report of the NRF's Top 100 Retailers List

Sponsored by

The U.S. Crime Surge
The Retail Impact

Are Rising Retail Prices the Real Driver of Crime?
Will Higher Inflation Lead to a Spike in Property Crime?

It may be a more reliable indicator than unemployment or general economic hardship.

Enter criminologist Richard Rosenfeld-a professor emeritus at the University of Missouri-St. Louis who has spent the better part of the last decade researching explanations for U.S. crime trends. In 2014, Rosenfeld proposed a new answer to the "Great Recession paradox" that focused not on unemployment or inequality but on inflation. Similar to the recession of 2008-10, the Great Depression saw an increase in unemployment and a drop in crime rates in the context of steep deflation. By contrast, in the 1970s, when inflation and unemployment took hold at the same time-the era of "stagflation"-crime rates rose. Inflation, not general economic hardship, appeared to be the culprit behind rising crime.

Rosenfeld's follow-up research on inflation and crime has supported his initial conclusion. In 2016, he found that only inflation had consistent and robust short- and long-term effects on national property crime rates. In 2019, he reported that those results could be extended to the city level, once again confirming that inflation has significant effects on property crime rates. And this year, he published a new paper showing a significant association between inflation and homicide rates, especially in more economically disadvantaged communities.

The underlying mechanism explaining why inflation affects property crime rates remains theoretical, but the proposed relationship is easy to follow. As prices rise, consumers tend to "trade down," or substitute cheaper goods and services. But for individuals who were already buying the cheapest goods (for example, shopping at discount outlets), the market in "hot" goods may be the only place where they can find what they need at prices they can afford. Increased demand for goods "sold off the backs of trucks" incentivizes thieves to create supply. The result, the theory goes, is a rise in property crime.

Which brings us to today. With headline inflation rates more than double the Federal Reserve's 2 percent target and consumers and some businesses increasingly worried that rising prices are here to stay, Rosenfeld's research takes on renewed relevance. If the inflation-crime connection bears out, the "spot" increases in thefts of catalytic converters, bikes, and lumber could spread widely to other products-adding a property crime surge to the increase in violent crime we have seen since the start of the COVID-19 pandemic. thebulwark.com

More Coverage of the Link Between Crime & Consumer Good Costs

● Crime and inflation - two bad things that go together

● Shoplifting losses mount amid inflation, product shortage and labor crunch

'Defund the Police' Impact?
Portland police chief slams city's violence as it sees 19 shootings in 54 hours and a double murder

Police have blamed the rise of deadly crime on staff shortages and budget cuts

Portland's police chief branded the woke-but-crime-ravaged city's 54 shootings over a 19 hour period 'stunning' and attacked calls to to defund his department.

'The ongoing tragedy of gun violence is on my mind tonight after a terrible weekend of violence in our city. A double murder this weekend. Nineteen shootings in 54 hours. Stunning,' Portland Police Chief Chuck Lovell tweeted on Monday night.

Officers are investigating 19 shootings that took place between early Friday morning and Sunday evening, which resulted in four arrests and numerous injuries.

Since the coronavirus pandemic, Portland's police department has been struggling to keep up with local crime amid an acute staffing shortage and budget cuts after calls to 'defund the police' in 2020 - city leaders slashed $27 million from the police budget that year, and crime is showing no sign of slowing down.

The city is also on the verge of creating a new police oversight board with sweeping powers, with most of those nominated for roles openly declaring progressive stances.

The city's police department is seemingly unable to fill positions on even the smallest of task forces aimed at reducing the violence, while the city's authorities scramble to implement alternative solutions to improve safety.

So far this year, Portland has had about 1,000 shootings, 314 people have been injured by bullets, and firearms have accounted for three-quarters of homicides. Police attribute much of the gunfire to gangs, fights and retaliation killings, but they are also affecting bystanders. dailymail.co.uk

Minneapolis Police Chief Speaks Out on Police Reform Vote
Minneapolis chief urges voters to reject replacing PD
Minneapolis Police Chief Medaria Arradondo urged voters to reject a ballot question that would replace the city's police department, saying it would do nothing to address the issues laid bare with the death last year of George Floyd.

Voters will decide Tuesday whether to approve a new public safety unit that would take "a more comprehensive public health approach" to policing. The ballot question would also drop a required minimum number of police officers and give City Council members more oversight of police.

Opponents have said the proposal is vague, with no specific plan for the replacement, and Arradondo took up the theme in his remarks Wednesday.

"To vote on a measure of reimagining public safety without a solid plan and an implementation or direction of work - this is too critical of a time to wish and hope for that help that we need so desperately right now," he told reporters. "I was not expecting some sort of robust, detailed word-for-word plan, but at this point, quite frankly, I would take a drawing on a napkin and I have not seen either." yahoo.com

It's Heating Up in Minneapolis - Police Reform Vote 1 Week Away
Groups seeking to influence Minneapolis election spend millions
Yes 4 Minneapolis, the group that wrote a proposal to clear the way for officials to replace the Minneapolis Police Department, was still working to finish its report, said spokeswoman JaNaé Bates.

Bates said the group For raised roughly $1.5 million in the nearly three months since the last filing period and had about $474,000 left for the final push.

Some groups that contributed to the effort filed their own disclosure reports, offering a partial view of Yes 4 Minneapolis' supporters. Groups reporting new, six-figure donations to Yes 4 Minneapolis included: the national American Civil Liberties Union, Reclaim the Block (through its fiscal sponsor, TakeAction Minnesota), and Faith in Minnesota. Bates said that individuals also gave, some as little as $3.

All of Mpls, a leading group against that proposal, was still completing its own report. The group Against raised roughly $1.4 million since the last filing period, campaign manager Leili Fatehi said in a statement. startribune.com

Facial Recognition & Policing
3 Strategies for Advancing Facial Recognition Technology in Policing

As more agencies launch FRT programs, standard best practices should be discussed regularly to ensure this technology protects citizen's privacy and civil liberties

There are three primary applications of FRT platforms: facial verification; field identification; and facial identification. All three applications serve a purpose and may play a role in law enforcement operations.

Having transparency between public and government stakeholders. Law enforcement agencies seeking to procure FRT platforms should engage both public and government stakeholders for feedback and transparency. The eventual outcome of any criminal investigation that utilizes FRT should be captured as part of the agency's data collection process.

Giving accountability to members having specialized training. Access to an agency's FRT platform should be limited to those members having specialized training in facial identification methods, and the application of the technology should be performed by individuals who are not directly involved with a particular investigation. According to the report, restricting access to an agency's FRT platform to only those members with specialized training will reduce contextual bias in particular investigations. MCCA also recommends agencies wishing to implement FRT should collaborate with other entities that have developed robust programs.

Appointing responsibility to an FRT program manager. This person should be tasked with both the initial deployment and continued oversight and development of the FRT program. FRT examiner training should specifically include familiarization with standardized methods for performing facial identification, and the initial findings of an FRT investigation should be confirmed by a secondary examiner. route-fifty.com

US McDonald's workers strike to protest workplace harassment & violence in stores
McDonald's workers in 12 U.S. cities have walked off the job to protest what they say is an ongoing problem of sexual harassment and violence in the company's stores. Organizers from the labor group Fight for $15 say several hundred workers were expected to participate in Chicago, Miami and other cities. McDonald's plans to require sexual harassment training in all of its 40,000 stores worldwide starting in January. But some workers say that's not enough. They cite a lawsuit filed last month by a teen employee who says she was raped by a McDonald's store manager earlier this year. waow.com

Read more about nationwide 'Striketober' protests in the news article further down in the column

SF Progressive DA's Father Paroled After 40 Yr Prison Term in '81 Brinks Robbery
San Francisco D.A. Chesa Boudin's Father Granted Parole After 40 Years In Prison
The father of San Francisco's district attorney was granted parole this week, 40 years after he was imprisoned for his role in a deadly 1981 Brink's truck robbery, the state corrections department said Tuesday.

Former Weather Underground radical David Gilbert, 76, has been behind bars since the infamously botched armored car robbery in which a guard and two police officers were killed. He became eligible for parole only after his 75 years-to-life sentence was shortened by Gov. Andrew Cuomo in August, hours before he left office. sanfrancisco.cbslocal.com

Baltimore earmarks $50 million in federal relief funding for violence prevention

Ridgway looks to add security to fight rising crime rates in town

COVID Update

416.1M Vaccinations Given

US: 46.5M Cases - 761.8K Dead - 36.4M Recovered
Worldwide: 245.9M Cases - 4.9M Dead - 222.8M Recovered

Former Senior Loss Prevention Executive
Know of any fallen LP exec? Let's remember & recognize.

Private Industry Security Guard Deaths: 321 Law Enforcement Officer Deaths: 498
*Red indicates change in total deaths

U.S. COVID Cases by Region

The End of the Delta Wave
Covid cases are dropping in the U.S. Is the delta wave over?

Even though it looks like the peak of the initial delta wave has been reached, there is an inherent unpredictability to the pandemic that is humbling.

The delta variant of Covid-19 appears to be loosening its firm chokehold on the United States. Since Sept. 1, daily new cases have dropped by 50 percent. Hospitalizations and deaths, which lag behind new infections, are also decreasing.

While there are some exceptions to the overall national Covid decline in hot spots like Alaska, Montana, North Dakota, Wyoming, Idaho and West Virginia, some experts have opined that - based on rising numbers of immunity from vaccinations and natural infections - this may have been the country's last major pandemic wave. Quite simply, the super-transmissible delta variant, which is responsible for more than 99 percent of the country's caseload and is the dominant strain just about everywhere in the world, is running out of immune systems that remain untrained to combat it.

But what seems like the end of the pandemic may only be a respite. The ascendancy of delta during a summer that once promised Covid freedom shows the vagaries of the virus and its unending virulence. As delta recedes in certain areas, it emerges in others. And with only 50 percent of the world's population vaccinated, the potential for threatening new variants remains ever present. nbcnews.com

NYPD Union Loses Big to Stop Vax Mandate
Judge denies NYPD union's bid to halt COVID vaccine mandate
A Staten Island judge denied a police union's request to temporarily halt the implementation of the city's vaccine mandate that is set to take effect November 1.

The Police Benevolent Association, New York City's largest police union, had argued in their request for a temporary restraining order on Monday that the policy does not make clear potential exceptions for medical or religious reasons, and does not give unvaccinated officers sufficient time to apply for such exemptions, as those appeals must have been submitted by Wednesday - one week after the mandate was announced.

Additionally, they noted that the department's "Vax or Test" program has been effective in ensuring public health while simultaneously providing privacy to individual medical decisions.

"Today's ruling sets the city up for a real crisis. The haphazard rollout of this mandate has created chaos in the NYPD," PBA President Patrick J. Lynch said in a statement. "City Hall has given no reason that a vaccine mandate with a weekly testing option is no longer enough to protect police officers and the public, especially while the number of COVID-19 cases continues to fall."

The union plans on filing an immediate appeal to the ruling. The NYPD could not immediately be reached for comment. cbsnews.com

Mandate's Impact on First Responders
Vax mandate could force FDNY companies to close, as NYPD faces street cop shortage
The FDNY is preparing to shutter as many as 20 percent of all Big Apple fire companies - and take an equal portion of its ambulances off the streets - ahead of the impending deadline for all city workers to be vaccinated against COVID-19.

On Wednesday, the FDNY said that just 65 percent of its firefighters, fire officers and EMS workers had been vaccinated despite Mayor Bill de Blasio's order that all city workers receive at least one dose or face suspension without pay on Monday.

"The Department must manage the unfortunate fact that a portion of our workforce has refused to comply with a vaccine mandate for all city employees," Fire Commissioner Daniel Nigro said in a statement later Wednesday.

"We will use all means at our disposal, including mandatory overtime, mutual aid from other EMS providers and significant changes to the schedules of our members," Nigro continued. "We will ensure the continuity of operations and safety of all those we have sworn oaths to serve." nypost.com

The Beginning of Mass Vaccine Resignations?
Some 5% of unvaccinated adults quit their jobs over Covid vaccine mandates, survey shows

One-quarter of workers surveyed by KFF in October said their employer has required them to get vaccinated, up from 9% in June and 19% last month.

Five percent of unvaccinated adults say they have left a job due to a vaccine mandate, according to a survey released Thursday by the Kaiser Family Foundation.

This early read on whether workers will actually quit their jobs over mandates comes as more employers are requiring shots. One-quarter of workers surveyed by KFF in October said their employer has required them to get vaccinated, up from 9% in June and 19% last month.

President Joe Biden announced in September a mandate for businesses with 100 or more employees to ensure workers are vaccinated against Covid or tested weekly for the virus. The mandate, which is currently still under review, is estimated to cover roughly two-thirds of the private sector workforce once it's implemented. The Kaiser survey only asked whether people have quit over a vaccine requirement, not a vaccine requirement with a testing option.

More than a third of unvaccinated workers said they would quit rather than comply with a vaccine or testing mandate, the Kaiser survey shows, a share that jumps to 72% if no testing option is offered. But because the nationwide mandate has yet to be officially implemented by the Labor Department, it remains to be seen what share of workers will quit when a broader swath of the U.S. workforce is covered. cnbc.com

Hybrid & Remote Work Is Not Going Smoothly
Hybrid work 'the most emotionally exhausting' arrangement, workers report

New survey shows hybrid work twice as emotionally exhausting for employees

● HR leaders are not in touch with employees' feelings about work arrangements, a recent study suggests. While the HR leaders surveyed in TinyPulse's Q3 State of Employee Engagement survey felt that hybrid and remote work were nearly equally emotionally exhausting for employees, employees surveyed said hybrid work was much more emotionally exhausting - nearly twice as emotionally exhausting as remote work.

● The survey revealed a number of other findings. HR leaders are more likely to be burned out and less likely to be "flourishing" compared with other employees; HR leaders were nearly twice as likely to say employers kept their promises during the return-to-work shift; and employees who had unfavorable and favorable attitudes toward returning to work both listed "work efficiency" as the primary reason for their feeling, suggesting that employees' experiences of effectiveness in their work environment vary widely.

While only 100 employees were surveyed for the TinyPulse study, the gap in emotional exhaustion reported by hybrid and remote workers - and the difference in how it is perceived by HR - may be a red flag for workplaces and a trend to watch as work policies continue to evolve. hrdive.com

Hundreds of NYPD cops get COVID-19 shot as vaccine deadline looms

Tampa Bay retailers outpacing the nation in COVID recovery, report says

Should I Mix or Match My Booster Shot?

'Striketober' Hits Fast Food Chains
The fast-food model lets corporations escape liability. California might chart
a new course
When you pass a McDonald's you might assume it's operated by the global mega-corporation. But in many cases, it's a franchise owned and run as a small business.

This model has been a pathway for entrepreneurs - many of whom are women, immigrants and minorities - to build wealth and become upwardly mobile. But it has also left workers in one of America's largest industries with little formal recourse for poor wages or unsafe work conditions.

Fast-food workers at stores scattered across California plan to walk off the job Nov. 9 and rally outside McDonald's locations in San Diego, Los Angeles, San Jose, Oakland and Sacramento in a push to expand legal liability beyond individual franchisees to their corporate franchisers and to protest workplace health and safety conditions.

The protests aim to pressure state lawmakers to support AB 257, a proposed law that would establish a statewide Fast Food Sector Council made up of workers, corporate representatives, franchisees and state officials that would meet every three years to negotiate industry standards on wages, work hours and other conditions for fast-food workers.

The bill would hold fast-food corporations responsible for ensuring their franchisees comply with a variety of employment and public health and safety orders, including those related to unfair business practices, employment discrimination, the California Retail Food Code, as well as new standards issued by the council. The bill would make franchisee violations of employment laws enforceable against franchiser and franchisee equally.

The planned action comes during a burst of protests and strikes this fall, dubbed "Striketober," as workers push for better workplace conditions and wages. Low-wage workers, having experienced decades of stagnating or declining wages and benefits, are fed up. The COVID-19 pandemic has given many blue-collar workers new frustration and visibility as they continue to operate in grueling, often deadly conditions. latimes.com

Store Safety: #1 Real Reason Workers Aren't Returning?
Study suggests overlooked reason why retail workers aren't returning
From wage increases and referral bonuses to free tuition, retailers and restaurants are employing creative tactics to lure new talent. But a study from Big Red Rooster, a JLL company, finds that the level of comfort in-store locations may be an underestimated factor in employee retention and attraction.

A store location that feels safe and comfortable ranked among the top three elements of a job in a study of frontline workers by Big Red Rooster, a JLL company. Pay and schedule flexibility ranked first and second respectively.

When asked to define what they meant by "safe" and "comfortable," respondents connected feelings of safety to their physical wellbeing, and comfort as an emotional factor.

According to the US Bureau of Labor Statistics, there were 16.9 million leisure and hospitality jobs in February 2020, compared to the 13.5 million reported in September 2021-a shortage of 3.4 million workers. chainstoreage.com

Dangers in the Supply Chain
Animations Illustrate Risks to Those Who Work Along the Supply Chain
Ever desirous of finding ways to reduce cargo crime the TT Club has published a series of seven animations to illustrate in graphic form a variety of theft techniques ranging from driver attacks, false authority personnel and inadequate perimeter fencing to theft from moving vehicles.

The illustrations aim to show clearly the potential dangers and make all operatives throughout the supply chain aware of these, no matter their function, location or level of experience. TT Club's MD of Loss Prevention, Mike Yarwood explained why the Club felt this was important, saying:

"Supply chain security is a vital consideration for all actors in the global supply chain, regardless of where they are operating or the nature of their contractual obligations. Cargo loss through theft or criminal damage has always been a concern but the current stresses and strains on supply chains across the world make security an even higher priority for operators and cargo owners alike." handyshippingguide.com

Trade Group Calls on Biden to Help Bring Down Cost of Shipping
Companies to U.S. Shipping Regulator: Enough Probes, Start Enforcing
A U.S. trade group representing companies selling luggage, backpacks and other travel products has written President Joe Biden asking that regulations on shipping and other fees be strictly enforced to help bring down the cost of shipping.

The Travel Goods Association, whose companies do some $1 billion in U.S. sales annually, asked for "immediate action - aggressive enforcement, leadership to bring the full gamut (of) stakeholders to the table, provide immediate relief, and more."

They said shipping costs are now eight to 10 times higher than what they paid last fall and that they "are now witnessing rates that exceed the value of product being shipped within the container." money.usnews.com

Retail Wage Wars
Costco raised its minimum wage to $17 an hour
Costco this week raised its starting wage for hourly store workers in the United States for the second time this year as businesses hike pay to draw and retain workers amid a labor shortage.

Costco told employees last week that it would increase its minimum wage from $16 an hour to $17 starting on Monday. Costco has around 180,000 US employees, and 90% of them work hourly. Costco's new starting wage puts the chain- which has among the lowest turnover rates in the retail industry- $2 per hour above Amazon, Target and other top retailers' minimum wage, and $5 an hour above Walmart's.

Costco's latest pay bump comes as many retailers, restaurants and other service sector employers raise pay, offer signing bonuses and sweeten their benefits packages in response to struggles hiring workers. cnn.com

Starbucks to hike U.S. employee pay to attract workers during labor crunch

Shell acquires 248 fuel and convenience store locations in Texas

Senior LP & AP Jobs Market

Associate Director, Warehouse AP job posted for GOAT in Los Angeles, CA
As a leader within the Asset Protection and Security department, the incumbent will be closely partnering with Operations, Retail Asset Protection, Inventory Control, and Workplace Services on a consistent basis; Overall responsibility for the prevention, detection, and resolution of inventory shrinkage, internal theft, and external crime in all GOAT operated and 3PL warehouse locations. GOAT is the global platform for the greatest products from the past, present, and future. The company offers styles across various time periods on its digital platforms and in its retail locations, while delivering products to over 30 million members across 170 countries. jobs.lever.co

Corporate Risk Manager job posted for Loomis
Central (Denver, Kansas City, Oklahoma, Little Rock & Calif.)
Summary of Role and Responsibilities: A proactive approach to preventing losses/injuries, whether to our employees, third parties, or customer's valuables. They include but are not limited to cash in transit, auto losses, or injuries. Read more here

All the News - One Place - One Source - One Time
Thanks to our sponsors/partners - Take the time to thank them as well please.
If it wasn't for them The Daily wouldn't be here every day for you.

CISO Benchmark Survey Deadline Extended

The deadline to participate in the CISO Benchmark Survey has been extended through October 29. If your organization has not yet participated, please forward the link to your CISO to complete before the deadline. It is critical we get as much participation from our members as possible to ensure the results are representative of the diverse RH-ISAC community.

The results of this survey can be used to educate your board and other executive governance bodies on investment priorities needed to mature your InfoSec program.

TAKE SURVEY

The Dangers of QR Codes
QR Codes Help Attackers Sneak Emails Past Security Controls

A recently discovered campaign shows how attackers are constantly developing new techniques to deceive phishing victims.

Researchers have observed an attacker using a technique they hadn't previously seen to attempt to sneak phishing emails past enterprise security filters.

Abnormal Security, which reported the campaign this week, says between Sept. 15 and Oct. 13 it detected and blocked some 200 emails that contained a QR code - instead of the usual malicious attachment or URL link - to try and drive users to a phishing website.

The emails contained a message that described the QR code as offering access to a missed voicemail and appeared designed to bypass enterprise email gateway scans that are typically only geared to detect malicious attachments and links.

All of the QR code images that Abnormal detected were created the same day they were sent. This made it unlikely that the QR codes, even if they had been detected, would have been previously reported and included in any security blacklist, the security vendor said in its findings.

The Better Business Bureau (BBB) in July warned of a recent uptick in complaints from consumers about scams involving the use of QR codes. Because the codes cannot be read by the human eye, attackers are increasingly using them to disguise malicious links, the BBB said.

Attackers are distributing malicious QR codes via direct messages on social media, text messages, physical mail, paper flyers, and email, it noted. Users who scan the codes using their mobile phones are directed to phishing websites that are designed to harvest personal information and login credentials, automatically follow a malicious social media account, or launch a payment app.

"In addition, Bitcoin addresses are often sent via QR codes, which makes QR codes a common element in cryptocurrency scams," BBB warned. darkreading.com

'The Status Quo is No Longer Tenable'
Four key tenets of zero trust security
As cybercrime threatens businesses of all sizes, industries and locations, organizations have realized that the status quo is no longer tenable and that implementing zero trust is necessary.

To adopt a zero trust model, keep these four tenets in mind:

Physical security
For all forms of computing, on-premise or in the cloud, the physical data center still represents the epicenter of customer data. More importantly, it also represents the first layer of defense against cyber theft.

Logical security
Logical security refers to the various layers of technical configurations and software that, combined, create a secure and stable foundation. In reference to layers, logical security is applied at the network, storage, and hypervisor layers.

Process
No security solution, whether physical or logical, is effective without trained and experienced people. If the people managing the system don't understand or know how to work within the controls established to protect the various systems, the solution will fail. Quite simply, you wouldn't spend thousands of dollars on a home security system, but then leave the keys to your house sticking out of the lock on the front door.

Ongoing audit
Lastly, the processes and systems in place must be regularly reviewed and audited to ensure regulatory compliance and adherence to the company's security standards. In highly regulated industries, such as financial services and healthcare, this is especially important. helpnetsecurity.com

AT&T announces 5G security solutions to protect businesses from cybersecurity threats
AT&T is introducing managed advanced security capabilities for 5G network deployments. The first security capability launching is a next-generation, managed firewall service to support AT&T 5G edge computing network solutions. This key service provides capabilities for threat visibility, prevention of advanced attacks at the application layer, and security policy enforcement, specifically for 5G-enabled IoT, OT and IT use cases.

AT&T's security-first approach to service design and delivery helps customers to design and scale security services with simplicity and minimal risk. This approach provides an operational and competitive advantage to maximize wireless network investments, deliver secure mobile experiences, and bring new opportunities for edge solutions. helpnetsecurity.com

Two Defendants Convicted For Operating $6M Business Email Compromise & Money Laundering Scheme
OLUWASEUN ADELEKAN, a/k/a "Sean Adelekan," and TEMITOPE OMOTAYO for conspiracies to commit wire fraud and money laundering, and aggravated identity theft.

About July 2016, ADELEKAN and OMOTAYO agreed with others to impersonate trusted advisers and business partners of victim individuals and businesses, and to trick those victims into wiring millions of dollars into "business" bank accounts controlled by ADELEKAN, OMOTAYO, and their co-conspirators. ADELEKAN, OMOTAYO, and their co-conspirators caused losses to victims in excess of $6 million.

ADELEKAN, 39, of the United States and Nigeria, and OMOTAYO, 39, of Nigeria, were each convicted of multiple offences and face 42 years each and are to be sentenced Jan. 27th. justice.gov

NIST Cybersecurity and Privacy Program
Comments Due by December 3, 2021 on Draft NIST SP 800-161 Revision 1
NIST has just released the second public draft of Special Publication (SP) 800-161 Revision 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, for public comment. We listened to your comments from earlier this year about the first version, we've made new changes, and we are hoping to get your feedback again on our new draft.

The initial public draft was published in April of 2021 and preceded the release of the President's Executive Order (EO) on "Improving the Nation's Cybersecurity (14028)" issued on May 12, 2021. This EO charged multiple agencies-including NIST-with enhancing cybersecurity through a variety of initiatives, but with a specific focus on the security and integrity of the software supply chain. csrc.nist.gov

FBI Releases Indicators of Compromise Associated with Ranzy Locker Ransomware

Conti ransomware explained:
What you need to know about this aggressive criminal group
Less likely to help victims restore encrypted files and more likely to leak exfiltrated data.

Black Market Pot Sales
California's legal weed industry can't compete with illicit market

Local government opposition, high taxes and competition from unlicensed businesses are complicating the state's push to build a thriving legal market.

California's cannabis market is booming nearly five years after voters legalized recreational weed. But there's a catch: the vast majority of pot sales are still underground.

Rather than make cannabis a Main Street fixture, California's strict regulations have led most industry operators to close shop, flee the state or sell in the state's illegal market that approaches $8 billion annually, twice the volume of legal sales.

Local government opposition, high taxes and competition from unlicensed businesses are complicating California's push to build a thriving legal market. Many of those factors are baked into California law, including rules allowing city leaders to shut out licensed cannabis enterprises. Meanwhile, the state has relaxed penalties against illegal operations in the name of racial justice.

Infighting between industry groups and lobbying dysfunction in Sacramento have stalled potential legislative fixes, with no clear end in sight. The scale of those problems has California's iconic cannabis industry - the legal side, at least - lagging behind other states that have regulated the market.

"You don't have a real cannabis industry if the dominant portion of it has no interest in being legal," said Adam Spiker, executive director of the Southern California Coalition, a cannabis trade association. "There's no other regulated industry in the world that I know of that operates like that." politico.com

Racism or Crime Crackdown?
A California county cuts off water to Asian pot growers
In the spring of this year, county supervisors effectively outlawed the transportation of water into a rural tract that had become known for its prolific cultivation of pot, squalid living conditions and large population of Hmong farmers.

The measure was just the latest attempt by local officials to shut down the pot farms, which authorities blamed for a spike in violent crime and environmental degradation.

This time however, as the Lava fire tore through the countryside, Siskiyou County's crackdown would erupt in violence and draw national attention to a bitter conflict involving race, water and the legalization of marijuana. It would also cause a federal court judge to openly question the county's motives for implementing such harsh measures, coming as they were at a time of severe drought, record heat and extreme risk of wildfires.

"The dehydration and de facto expulsion of a disfavored minority community cannot be the price paid in an effort to stop illegal cannabis cultivation and any attendant harms," wrote Judge Kimberly J. Mueller of the Eastern District of California. latimes.com

Tamper-Evident Packaging
Science and Security Combine in Tamper-Evident Packaging
Industries from cannabis to food delivery have begun implementing tamper-evident packaging to demonstrate to customers (and regulators) that products have not been manipulated.

Goal of Tamper-Evident Packaging

In the cannabis industry, tamper-evident packaging deters internal theft and diversion by minors. If packaging is violated, management can investigate when and why the incident occurred. Even small siphoning and losses of cannabis by weight adds up in large quantities over time. Similarly, tamper-evident packaging permits adults to know if minors in their residence are trying to misuse their cannabis products. For food delivery, tamper-evident seals prevent drivers from stealing fries or other customer-destined items.

Tamper-Evident Seals

Tamper-evident packaging relying on seals operate under slightly different principles. With a strong adhesive on a rippable substrate, example here, these tamper-evident solutions will immediately collect dust and particles wherever the adhesive does not bond to a surface; thus, once exposed to air and detached, the adhesive will not bond as strongly to anything ever again. sapphirerisk.com

Texas says popular cannabis extract, delta-8, is illegal, sending retailers scrambling
Three years after federal legislation removed the marijuana extract known as delta-8 THC from the nation's list of controlled substances, Texas health officials have put it on its own list of illegal drugs, sending a shockwave through the growing CBD retail industry across the state and making the substance, essentially, illegal. texastribune.org

Scientists Develop Quick Test for Marijuana Use

Adult Use Cannabis and The Workplace

Consumers Turn to CBD to Calm Pandemic-Related Anxiety

One Email Could Change the Way Amazon Pays Workers
Frustrated worker's email to Jeff Bezos may change way Amazon pays everyone

Internal errors with system for taking leave saw many workers underpaid or even fired

A new mother working for Amazon was so frustrated at being underpaid by the company, she emailed founder Jeff Bezos to complain, triggering an internal investigation.

Her actions revealed that Amazon was systematically underpaying workers who were on leave and that there were major problems with the company's payroll and human resources systems.

The New York Times reports that Tara Jones, who works at an Amazon warehouse in Oklahoma, emailed Mr Bezos in 2020 after discovering she was being underpaid by $90 out of the $540 a month she was owed.

Amazon discovered through its internal investigation that the company was underpaying employees on leave, including those absent from work for medical or disability leave. The Times reports that the problem went on for at least 18 months and as many as 179 warehouses may have been affected.

Amazon spokesperson Kelly Nantel told the paper that the company was still trying to identify who had been underpaid.

The Independent has contacted Amazon for comment on the status of the problem and what steps are being taken to correct it.

Another warehouse worker identified in the report ended up in such dire straits he had his car repossessed and he and his wife were forced to sell their wedding rings to afford food and pay medical bills. independent.co.uk

Avoiding Fraud This Holiday Season
How to Protect Yourself From Online Card Fraud
Americans are expected to do much of their holiday shopping online this year even as the pandemic recedes, and criminals are expected to follow them. So here are some tips for safe digital shopping.

Credit cards are often considered the safest payment option when shopping online because they have strong, federally mandated consumer protections. If you have a disagreement with a merchant or receive a defective product and can't resolve the problem yourself, you can dispute it with your card company.

In addition, the major payment networks generally go beyond the requirements and extend zero fraud liability for credit card and certain debit card transactions, according to WalletHub.

Some shoppers may want to consider options like "virtual" credit cards or digital wallets, which add an extra layer of security when you use them.

Services like ApplePay and GooglePay can also add protection when payment cards are used. The services create random account numbers, or "tokens," that shield your real number when you make a purchase. nytimes.com

Do online shoppers care about the 'About Us' page?

Nationwide Scheme Cost Retailers & Manufacturers Over $31 Million
Virginia Beach, VA: Virginia woman's $31M coupon scam revealed
A Virginia woman was able to scam millions of dollars from retailers with the use of fraudulent coupons. Lori Ann Talens, 41, and her husband, Pacifico, 43, of Virginia Beach, were involved in a "nationwide scheme" between April 2017 and May 2020 where they created and sold fake coupons, causing losses of around $31,817,997 from retailers and manufacturers, according to a statement from the Justice Department. The couple, who have pleaded guilty to counts of fraud and were sentenced to time in prison, used Facebook and Telegram to get in touch with coupon lovers and get them in on the scheme, authorities said.

"Counterfeiting coupons harms the entire retail industry and causes financial loss to consumers, businesses, and the economy. As this case demonstrates, those who use illegal get-rich-quick schemes to deceive others will be brought to justice," Raj Parekh, the acting U.S. attorney for the Eastern District of Virginia, said in the DOJ statement. "The first time the Coupon Information Corporation (CIC) called Postal Inspector Jason Thomasson with a tip about a Virginia Beach resident who they believed was making and mailing counterfeit coupons, the center didn't yet have a sense of the fraud's scale. Without a loss amount, Thomasson didn't think he could gather support for an investigation," the FBI said in a statement.

Months later, the CIC provided another tip, this time telling Thomasson they'd been able to link roughly $125,000 worth of fake coupons back to Talens, according to the FBI statement. Shannon Brill, a special agent with the FBI, got interested and joined the investigation. During a search of Lori Ann Talens' home, agents found thousands of counterfeit coupons, rolls of coupon paper, and coupon designs for more than 13,000 products on her computer. Federal Bureau of Investigation. yahoo.com

NYPD: 77 Suspects With 20+ Shoplifting Charges Emboldened By Bail Reform
New York, NY: Scourge shoplifting NYC drug stores leaves empty shelves CVS, Duane Reade and Walgreens
Shelves in pharmacies across New York City are nearly barren following shoplifting sprees that see criminals emboldened by the state's bail reform laws who brazenly fill their own shopping bags before heading out the door. The crooks steal much-needed household items from toothpaste to detergent, often to be sold directly out on the street to unsuspecting members of the public. Drug stores which are filled with all manner of small essentials, such as toothpaste, face wash and hand sanitizer, the majority of which are easy to pocket, make it a veritable gold mine for the shameless swipers. The crooks steal much-needed household items with everything from toothpaste to detergent removed from displays, often to be sold directly out on the street. Drug stores which are filled with all manner of small essentials, such as toothpaste, face wash and hand sanitizer, the majority of which are easy to pocket, make it a veritable gold mine.

Isaac Rodriguez, 22, has a long criminal record due to his serial thefts in drug stores and shops in New York City One man, Isaac Rodriguez, 22, from Queens, has been arrested for shoplifting 46 times this year alone. Rodriguez, a serial shoplifter since he was just 15 years old, is alleged to have stolen from Walgreens 37 times, making off with everything from protein drinks to soap, baby formula and body lotions. In total he has been arrested 57 times for other offenses, including petty and grand larceny and gang assault. The NYPD say there are 77 other thieves with rap sheets of 20 or more shoplifting charges who are still walking around the streets of the Big Apple. texasnewstoday.com

Paducah, KY: Man wanted for stealing credit card used to buy $8K in pre-paid credit cards

St. Petersburg, FL: Police In St. Pete Searching For Publix Serial Shoplifter

Cleveland, OH: Man arrested for stealing more than $600 worth of seafood, steaks from Giant Eagle

View ORC Archives

Case Goes Public?
Share it with the industry

Submit your ORC Association News

Visit ORC
Resource Center

Shootings & Deaths

St. Louis, MO: Pontoon Beach Police Officer dies after being shot at gas station
A Pontoon Beach police officer has died after being shot Tuesday morning at a gas station. Officer Tyler Timmins, 36, died at a St. Louis hospital of his injuries, said Trooper Jayme Bufford of the Illinois State Police. His body was transported to the St. Louis medical examiner's office Tuesday afternoon, escorted by a procession of police cars that stretched for a half-mile Timmins was shot about 8 a.m. Tuesday on the parking lot of a Speedway gas station, at Highway 111 and Chain of Rocks Road. As the officer walked toward a vehicle he suspected had been stolen, a man began firing shots, Bufford said. Illinois State Police said a man was arrested on the scene immediately after the shooting. Police had not publicly identified the suspect. The vehicle that apparently sparked the officer's interest was a stolen Toyota Tacoma pickup truck with Missouri license plates. The injured officer was rushed to a hospital in Granite City with life-threatening injuries, then transferred to SSM Health St. Louis University Hospital, which specializes in the most critical cases. Officers from numerous departments congregated outside in support. stltoday.com

Lubbock, TX: 2 gunshot victims, 3 arrests after shooting in Walmart parking lot
Lubbock Police revealed more details to EverythingLubbock.com about an overnight shooting that left two people injured and three suspects arrested. According to police, an officer was in the area on an unrelated call, heard shots fired and began checking the area. A car stopped in front of the officer, the driver exited the vehicle and told the officer he was shot. The victim said the suspects were driving a brown Trailblazer. The victim sustained multiple gunshot wounds, and the officer performed lifesaving measures until he was taken to University Medical Center, police said. The crime scene related to the shots-fired call was later located in the Walmart parking lot at 1911 Marsha Sharp Freeway. everythinglubbock.com

Memphis, TN: Over 100 rounds fired at gas station, 3 shot
Memphis Police responded to a shots fired call at a gas station off Lamar and Bellevue early Wednesday morning and found two vehicles riddled with bullets. Pay close attention to the black sedan sitting at this gas station on the corner of Bellevue and Lamar Avenue. At first, things are peaceful until this brown van comes into the picture. Immediately, shots ring out from the van, and those sitting inside the sedan duck for cover. Shortly after the van leaves, you see someone run-up to the passengers from across the street and start shooting. One of the passengers fire back and the gunman runs off. Memphis Police say three people were shot. Two of the victims are going to be ok but one arrived at the hospital in critical condition. Bystanders said they heard nearly 100 rounds. wreg.com

Fort Worth, TX: Police Investigating After Man Shot At 7-Eleven Store

Louisville, KY: Teen shot during carjacking at convenience store in Fairdale

Warren, MI: Suspect in Sunday shooting at Warren gas station in custody

Robberies, Incidents & Thefts

Rockford, IL: Man faces life in prison, convicted of 2015 violent crime spree
Rickey Claybron and his co-conspirators were convicted of a series of violent retail robberies that occurred in Rockford from October through November of 2015. After a seven-day trial in U.S. District Court in Rockford, a jury convicted Rickey Claybron, 35, of Rockford, on one count of conspiracy to commit robbery, three counts of robbery, one count of attempted robbery, two counts of brandishing a firearm during a crime of violence, and two counts of discharging a firearm during a crime of violence. Claybron faces a maximum sentence of life in prison and a $2.25 million fine when he is sentenced next year. chicagojournal.com

Long Beach, CA: Police order hundreds of cyclists to leave Food 4 Less after thefts during mass bike ride
A large group of bicyclists grabbed $300 to $400 of merchandise from a Signal Hill grocery store before being shooed away by police officers Sunday afternoon, according to authorities. Signal Hill police said the group of about 200 to 300 bicyclists was riding through the city, sometimes blocking streets, when Signal Hill police got a call around 1:50 p.m. The caller reported the group was causing traffic problems near Willow Street and Cherry Avenue, according to a statement from the SHPD. A few minutes later, an employee at the nearby Food 4 Less called police to say a large group of bicyclists had come into the store and started stealing alcohol and other items, the SHPD said. "On behalf of the business, the employee asked for the officers to tell the subjects to leave their property," the department said in a statement. Officers used their cars' PA systems to tell the group to leave and obey traffic laws, but officers didn't try to detain anyone because Food 4 Less employees didn't want to press charges, SHPD Lt. Kelli Crigler said. lbpost.com

Richmond, VA: FBI joins local Law Enforcement in Richmond robbery investigation
FBI Richmond's Central Virginia Violent Crimes Task Force has joined the Henrico County Police Division and the City of Richmond Police Department in the investigation of a series of robberies that occurred on March 5. The 7-Eleven located in the 10000 block of Staples Mill Road, the Valero located in the 4400 block of Broad Street, and the WaWa located in the 2400 block of Staples Mill Road are believed to have been robbed by the same individual. augustafreepress.com

American Canyon, CA: Police arrest shoplifter threatening Walmart employee
with axe
The man was identified as 35-year-old Vallejo resident Wenzell Smith who was placed under arrest for petty theft and robbery. Authorities spoke with the Walmart employee who said Smith raised an axe above his head in a threatening manner. The employee saw Smith walking out of a fire exit with a shopping cart filled with multiple items. As Smith tried to escape out of the fire exit, officers put him in handcuffs, according to the release. Once he was detained, police searched Smith and found a methamphetamine pipe, along with two rifle rounds in a rifle magazine. Criminal records revealed that Smith was a convicted felon and cannot possess ammunition, authorities said. Smith was later transported to Napa County Jail where he is currently in custody. kron4.com

Petaluma, CA: Police arrest suspect in Big 5 store robbery

York, PA: Alleged Repeat Offender Nabbed At Central PA Dollar Store Armed Robbery

Fall River, MA: Police investigating third convenience store robbery in less than 10 days

Waldorf, MD: Suspect captured after police learn he wore ankle monitoring bracelet during Armed Robbery

Daily Totals:
• 18 robberies
• 5 burglaries
• 0 shootings
• 0 killed

Click to enlarge map

Christopher Sanjurjo CLSS, M.A. promoted to Fraud Team Leader
for Louis Vuitton

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

Help Your Colleagues By Referring the Best Refer the Best & Build the Best
	Director, Loss Prevention & Safety Goleta, CA - posted September 24 The Director of Loss Prevention & Environmental, Health and Safety plans, organizes, implements, and directs HERBL's programs, procedures, and practices to ensure the safety and security of company employees and property...
	Corporate Risk Manager Central (Denver, Kansas City, Oklahoma, Little Rock & Calif.) - posted October 5 Summary of Role and Responsibilities: A proactive approach to preventing losses/injuries, whether to our employees, third parties, or customer's valuables. They include but are not limited to cash in transit, auto losses, or injuries...
	AP Lead Manhattan, NY - posted October 19 This role will conduct investigations focusing on Habitual Offenders, high impact external theft/fraud incidents through the use of company technology (CCTV, Incident Reporting, Data Analysis). This role directly teaches and trains Store Leaders and Brand Associates in the safe practices of effectively handling external theft events...
	Regional Loss Prevention Manager Houston, TX (Remote Opportunity) - posted October 14 The position will be responsible for: Internal theft investigations; External theft investigations; Major cash shortage investigations; Fraudulent transaction investigations; Missing inventory investigations; Reviewing stores for physical security improvements...
	Environmental Health, and Safety Manager Eden Prairie, MN - posted October 7 The Environmental Health, and Safety Manager will implement policies to ensure a safe and healthy work environment. Inspects the facility to identify safety, health, and environmental risks. Develops and implements inspection policies and procedures, and a schedule of routine inspections. Prepares and schedules training to cover emergency procedures, workplace safety, and other relevant topics. Read more here
	Field Loss Prevention Manager Seattle, WA - posted October 7 Staples is focused on our customer and our community. As a Field Loss Prevention Manager for Staples, you will manage and coordinate Loss Prevention and Safety Programs intended to protect Staples assets and ensure a safe work environment within Staples Retail locations...
	Asset Protection Lead Hudson Valley, NY - posted September 13 Responsible for protecting the assets of the company and ensuring a safe environment for our employees and customers. Utilizes the tools and resources available to initiate and follow through on internal investigations. Work closely with store management to increase LP awareness...
	District Loss Prevention Manager Macedonia, OH - posted September 9 The District Loss Prevention Manager develops and implements the Loss Prevention program for their market. The DLPM is responsible for driving results through achievement of goals related to inventory shortage, budget lines, cash variance and operational compliance...
	District Asset Protection Manager Burlington, MA - posted September 1 The District Asset Protection Manager is responsible for mitigating safety and security related risks for the organization through the implementation of programs, procedures, policies and training. This role promotes a safe store environment while addressing and minimizing loss caused by shrink, theft and fraud in assigned stores, across multiple locations...
	Area Loss Prevention Manager Pittsburgh, PA and/or Cleveland, OH - posted July 30 Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities. Our Area Loss Prevention Managers plan and prioritize to provide an optimal customer experience to their portfolio of stores. They thrive on supporting and building high performance teams that execute with excellence...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs | Post Your Job

Everyday you've got to work and you've got to ask yourself what value are you adding to the company, to the industry and to your career. While this may seem rather ominous at first, try reducing it to your daily tasks and just make sure that with every effort you make there is value you deliver to someone, to some store or to some project. If you can merely focus on the word "value" and ask yourself am I delivering it everyday, you're then one step closer to advancing your career. Because if you can build the field they will come and play.

Just a Thought,
Gus

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter.
Want to know how? Read Here

FEEDBACK / downing-downing.com / Advertise with The D&D Daily