How do cyberattacks on retailers work and what should customers do?

Numbers match the citations in the article. A working link isn't proof that a page supports a claim; check the quoted passage and date.

1. 1

   Breaking the Target: An Analysis of Target Data Breach and Lessons Learned

   arXiv (Cornell University) (Shu et al.)Published Jan 18, 2017Checked Oct 14, 2026

   “This paper investigates and examines the events leading up to the second most devastating data breach in history: the attack on the Target Corporation. It includes a thorough step-by-step analysis of this attack and a comprehensive anatomy of the malware named BlackPOS. Also, this paper provides insight into the legal aspect of cybercrimes, along with a prosecution and sentence example of the well-known TJX case. Furthermore, we point out an urgent need for improving security mechanisms in existing systems of merchants and propose three security guidelines and defenses. Credit card security is discussed at the end of the paper with several best practices given to customers to hide their card information in purchase transactions.”

2. 2

   Cyberattacks in supply chains: A multi-case study.

   PloS one (Zhang et al.)Published May 22, 2026Checked Oct 14, 2026

   “The scale of disruption is systematically amplified by inter-system coordination failures, while resilience emerges only when proactive information sharing is activated by strong internal organizational readiness. We introduce the concept of synergy dependency, demonstrating that external relational governance is hierarchically contingent on internal organizational controls, and reconceptualize Points of Penetration (PoPs) as dynamic transmission mechanisms that convert localized digital breaches into systemic operational paralysis. This research offers empirically grounded insights that adapt the SCCSS framework from a classificatory tool into a process-oriented model capable of explaining how cyber risk propagates as a lifecycle of entry, transmission, and interruption. The findings contribute analytical interpretations to supply chain governance theory by showing that cyber resilience is conditionally interdependent across subsystems. Practically, the study offers actionable guidance for implementing secure architecture, cross-organizational threat intelligence sharing, and supplier-support programs to strengthen the resilience of complex global supply chain ecosystems.”

3. 3

   Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim

   BBC NewsPublished Oct 13, 2026Checked Oct 14, 2026

   “TFG London has apologised to customers for disruption after it identified a "cybersecurity incident" on Sunday.”

4. 4

   Transient Customer Response to Data Breaches of Their Information

   Management Science (Agarwal et al.)Published Jan 31, 2024Checked Oct 14, 2026

   “Cybersecurity breaches pose a substantial concern in the digital era. We investigate how customers respond to multiple unexpected data breaches of their information in India. Difference-in-differences estimates show that digital payments declined by 9% relative to cash payments immediately after an unexpected data breach in a food delivery platform, but the gap disappeared three months later. Customer entry and exit also exhibit weak, short-lived changes. Additional analyses on bank and online grocery data breaches uncover even weaker effects of data breaches. Our findings imply that the perceived benefits of convenience outweigh the costs of payment security risks. This paper was accepted by David Sraer, finance.”

5. 5

   Digging Deeper into Data Breaches: An Exploratory Data Analysis of Hacking Breaches Over Time

   Procedia Computer Science (Hammouchi et al.)Published Jan 1, 2019Checked Oct 14, 2026

   “Data breaches represent a permanent threat to all types of organizations. Although the types of breaches are different, the impacts are always the same. This paper focuses on analyzing over 9000 data breaches made public since 2005 that led to the loss of 11,5 billion individual records which have a significant financial and technical impact. Also, since the most devastating breaches are hacking breaches, we shed the light on type to unveil the most targeted organizations, and examine how the interest of hackers changes over time. On the other hand, the breaches caused by human factor are decreasing which can be explained by the awareness of employees and the application of security standards. This study would improve the state of knowledge about hacking breaches and help in securing organizations’ data by prioritizing the most attacked sectors.”