Retailers in the UK Getting Hit Hard
UK authorities warn of retail-sector risks following cyberattack spree

Three major retail brands, including Harrods and M&S, have been targeted in recent weeks.

U.K. authorities are urging organizations to remain vigilant following a series of cyberattacks against three leading retail companies, including the famed Harrods department store based in London.

Harrods confirmed it was the target of an attempted hack, which took place days after a threat actor stole data from retailer Co-op and a separate attack disrupted operations at Marks & Spencer.

The U.K. National Cyber Security Centre said it has been working closely with organizations that reported attacks to the agency to develop a better understanding of the intrusions and issue advice to the wider sector.

“These incidents should act as a wake-up call to all organisations,” NCSC CEO Richard Horne said in a statement Thursday. “I urge leaders to follow the advice on the NCSC website to ensure they have appropriate measures in place to help prevent attacks and respond and recover effectively.”

In a blog post published late Sunday, senior NCSC officials explained how the sector should take steps to mitigate potential ransomware attacks.

“Whilst we have insights, we are not yet in a position to say if these attacks are linked, if this is a concerted campaign by a single actor or whether there is no link between them at all,” wrote NCSC Director of National Resilience Jonathon Ellison and CTO Ollie Whitehouse.

They urged security teams to use multifactor authentication, check for risky logins in Microsoft Entra ID Protection and review help desk login procedures, among other steps. cybersecuritydive.com


Make It Make Sense: Cybersecurity Edition
How CISOs can talk cybersecurity so it makes sense to executives
CISOs know cyber risk is business risk. Boards don’t always see it that way.​

For years, CISOs have struggled to get boards to understand security beyond buzzwords. Many feel they’re either ignored or misunderstood. But with threats growing and regulations tightening, that’s changing. Boards now expect CISOs to speak their language: risk, dollars, impact.​

Here’s how security leaders can get through, with real-world tips on making cybersecurity resonate in the boardroom.

Translate risk into dollars

The board isn’t full of technologists. Most members come from finance, legal, or operations. They think in terms of business performance, liability, and shareholder value.​

So, don’t show up with threat feeds or patch stats. Focus on what matters to them. For example:​

• How a ransomware attack could halt revenue for a week

• How failing an audit might impact customer trust

• How a breach could trigger regulatory fines​ helpnetsecurity.com

Organizations Lean Into AI
American Honda steers AI efforts with data governance, quality focus

The generative AI early adopter has worked to improve data management as it aims for better model accuracy and performance to bolster decision-making.

American Honda laid out a generative AI strategy in 2023, focused on immediate risks, bringing capabilities in-house, training and long-term planning. As the company advanced on its broader goals, executives increased the focus on responsible AI and the data foundation that powers the technology.

“We’re trying to improve our decision-making speed and our decision-making quality at every level of the organization,” said Bob Brizendine, SVP of IT at American Honda and deputy head of the digital unit in the corporate administration operations at Honda Motor. “The reason we put brakes on a car is so we can go safer, faster, and data governance and AI governance are really in that same domain.”

As enterprises invested in generative AI, adequate governance became critical to reach AI ambitions. Poor frameworks can lead to a legion of roadblocks, from increased costs and subpar performance to project delays and biased results.  cybersecuritydive.com

 
Online fraud peaks as breaches rise

Trump proposes major cut to CISA’s budget, citing false ‘censorship’ claims

Wilmington, DE: Update: Pawn shop part of multimillion-dollar conspiracy to sell stolen goods
Federal prosecutors claim a former pawn shop on Market Street in Wilmington was part of a multimillion-dollar conspiracy to flip stolen goods. Philadelphia residents Larry and Nathaniel Leonard are charged in federal court with conspiracy to sell stolen goods and transportation of stolen property, partially using the former business known as Lou’s Jewelry and Pawn in Wilmington. The shop has been closed since law enforcement raided it late last year. The duo jointly ran three pawn shops: the Wilmington establishment and two other shops in Philadelphia, according to charging documents filed in federal court. Prosecutors claim the businesses were used to buy and sell new, in-box merchandise that was stolen. The duo would transfer stolen goods to the Delaware pawn shop, as well as one in the Kensington neighborhood in Philadelphia, and then sell the goods on an eBay site for their shop in Philadelphia’s Society Hill neighborhood. From November 2019 through the end of 2023, the duo is accused of selling more than $19 million in stolen merchandise. Larry Leonard is also charged with money laundering and faces a maximum sentence of 45 years in prison. Nathaniel Leonard faces a maximum sentence of 15 years, according to prosecutors.  yahoo.com


Santa Clarita County, CA: Organized retail theft charges don’t stick in Target case
A San Fernando Superior Court judge dismissed two counts and allowed several others to proceed last week for a couple that Santa Clarita Valley Sheriff’s Station officials nicknamed “Bonnie and Clyde” because they were identified as suspects in several incidents. Judge Robert Sanchez DuFour found cause for Nathaniel Rivas Jr. to be charged with felon in possession of a firearm and an allegation that he had one or more serious violent felony convictions. His second count was possession of ammunition with the same allegation. DuFour dismissed two of the more serious counts against Rivas, a second-degree robbery charge and the same allegations regarding his prior conviction, and the relatively new organized retail theft charge and the prior allegation. Rivas’ co-defendant, Maria Elizabeth De La Torre, was not as fortunate, in terms of the charges. While DuFour also dismissed the organized retail grand theft charge and an allegation of criminal threats, he held her to answer to: a petty theft with two prior convictions charge; second-degree robbery with an allegation that a firearm was used; assault with a deadly weapon with force, possible great bodily injury; felony possession of a firearm; and felony possession of ammunition.   signalscv.com


Decorah, IA: Northeast Iowa woman charged with stealing over $15,000 in items from Dollar General
The former manager of the Dollar General store in Cresco is accused of stealing thousands of dollars’ worth of merchandise. Jamie Sue Bockman, 44 of Decorah, has been charged with first-degree theft and two counts of possession of a controlled substance-2nd offense. Court documents state the Dollar General in Cresco has been closed to the public since January due to a fire. The company’s loss prevention division says the store has been declared a total loss and no employee was allowed to remove any merchandise. Law enforcement says a search of Bockman’s home on April 25 found over $6,100 in items stolen from Dollar General. Officers say a secondary search of a storage unit located more stolen property, putting the total theft amount at over $15,000. Court documents state methamphetamine, marijuana, and drug paraphernalia were also discovered at the storage unit.  kimt.com


Denver, CO: Four people who allegedly stole over $150,000 in lottery tickets indicted by Colorado grand jury
A Colorado grand jury has indicted three men and a woman who investigators say stole over $150,000 worth of lottery scratch tickets in at least 45 separate thefts from stores across the Front Range. That total includes the retail value of the tickets themselves and prize winnings, according to investigators.  msn.com


Miami, FL: Cuban Amazon delivery driver arrested for stealing $45,000 in packages

State College, PA: Police seeking public’s help after retail store merchandise stolen