Retailers worldwide are facing increasing pressure due to a series of high-profile cyber attacks. Global brands such as Adidas, Victoria’s Secret, Cartier, and North Face have recently been targeted. These incidents highlight the growing cyber risks that affect not only large multinational corporations but businesses of all sizes.
Security experts stress the importance of improving cyber security measures, especially regarding third-party suppliers and the supply chain. Siân John, Chief Technology Officer at NCC Group, pointed out that the Adidas attack, which was traced to a breach through a third-party customer service provider, underscores the need for better supplier oversight.
“Although the attacker behind the Adidas breach is still unknown, it’s clear that the breach came from a third-party provider. This shows how essential it is for companies to monitor their suppliers’ security measures. Brands must work closely with their partners to strengthen the entire ecosystem,” John said.
John also urged businesses to continuously review their internal and supply chain security measures, as cyber threats are constantly evolving. “Organizations must remain agile and regularly reassess their cyber security. They should carefully vet suppliers from the start and continue to evaluate their security posture to prevent potential risks.”
The impact of these cyber attacks goes beyond technical problems. They disrupt operations, affect employees, and impact customer trust. Tim Rawlins, Senior Adviser at NCC Group, commented on Victoria’s Secret’s recent cyber attack, noting that recovery can be slow and complex. He praised the company for its transparency in handling the situation.
“Victoria’s Secret has made it clear that resolving the incident will take time. We know from experience that recovery after an attack can be complex. By keeping customers and stakeholders informed, Victoria’s Secret is handling the situation properly,” Rawlins said.
The attack also affected office functions, staff IT services, in-store systems, and online platforms. “This highlights how deeply such breaches can impact global businesses. Halting operations temporarily, rather than rushing to restore them, is critical for long-term recovery and strengthened security,” Rawlins added.
The ‘consumer discretionary’ sector, which includes retail, was the second most targeted industry for ransomware attacks in April 2025, according to data from NCC Group. Rawlins explained that retail is particularly vulnerable due to the rapid impact of disruptions. “Retail is a sector where attacks are fast and severe. Cyber criminals know this,” he said.
Further attacks on luxury retailer Cartier and outdoor brand North Face have raised additional concerns. Ade Clewlow MBE, Senior Advisor at NCC Group, warned that the current wave of cyber attacks is becoming the new normal, not a temporary spike. “While these high-profile retail breaches may seem unprecedented, cyber attacks are now a daily reality. The risks extend far beyond retail. In fact, the industrial sector was the most targeted in April, accounting for 32% of all ransomware attacks,” Clewlow said.
Clewlow also noted the increasing sophistication of cyber criminals. “Attackers are using advanced social engineering tactics and new technologies. Last year saw the highest number of ransomware incidents on record. And it’s not just big corporations at risk – cyber attacks are now a concern for businesses of all sizes. The key is preparation, not panic. Proactive cyber security strategies are essential. Prevention is not just better than a cure; it is the only effective defense.”
As businesses navigate a more dangerous digital landscape, experts agree that ongoing vigilance, strong supply chain security, clear communication, and consistent investment in cyber defences are crucial to reducing the impact of future cyber threats.
