New KnowBe4 Report Reveals Stolen Credentials Emerge as Top Concern in Global Retail Sector
KnowBe4, the world-renowned cybersecurity platform that comprehensively addresses human risk management, today released its "Global Retail Report 2025," revealing a notable shift in cybercriminal tactics targeting the retail sector. The report finds that credential harvesting, which is often orchestrated through phishing attacks, has become the predominant threat, accounting for 38% of all compromised data in 2023, while payment card data theft dropped to 25%.
The research shows an alarming increase in cyberattacks in the retail sector, with attack frequency rising by 56% in 2023 compared to the previous year. This puts retail in the top five industries targeted by cybercriminals. The average cost of a retail data breach reached $3.48 million in 2024, an 18% increase from 2023.
Key findings from the report include:
- Credential theft now accounts for 38% of all compromised data, while payment card theft dropped to 25%, making credential harvesting the leading threat in retail cyberattacks.
- North America's retail sector experienced the highest percentage of attacks (56%), while Latin America saw the second most at 32%, and Europe experienced 11% of attacks.
- The U.S. retail sector accounted for 45% of global ransomware attacks despite representing only 28% of market share, making retail the second most targeted sector.
- Conducting security awareness training and simulated phishing evaluations for one year or more can reduce the likelihood of employees falling for phishing attacks for organizations of all sizes.
The report demonstrates the significant impact of security awareness training on reducing human risk in retail organizations. Employee susceptibility to phishing attacks dropped from 42.4% to just 5.2% in large retail organizations, while small and medium-sized retailers saw similar improvements, with rates dropping to 4.7% and 4.5% respectively after one year of continuous training.
"Our research reveals a critical shift in how cybercriminals are now prioritizing credential theft over payment card data," said Stu Sjouwerman, CEO of KnowBe4. “Stolen credentials allow immediate access to personal accounts, bypassing security measures like passwords and two-factor authentication. The good news is that organizations implementing frequent security awareness training are seeing dramatic improvements, demonstrating that human risk management must be a core component of any retail organization's security strategy."
To download the full KnowBe4 Global Retail Report 2025, click here.
About KnowBe4
KnowBe4 empowers workforces to make smarter security decisions every day. Trusted by over 70,000 organizations worldwide, KnowBe4 helps to strengthen security culture and manage human risk. KnowBe4 offers a comprehensive AI-driven ‘best-of-suite’ platform for Human Risk Management, creating an adaptive defense layer that fortifies user behavior against the latest cybersecurity threats. The HRM+ platform includes modules for awareness & compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, and more. As the only global security platform of its kind, KnowBe4 utilizes personalized and relevant cybersecurity protection content, tools and techniques to mobilize workforces to transform from the largest attack surface to an organization’s biggest asset.
View source version on businesswire.com: https://www.businesswire.com/news/home/20250310785044/en/
Contacts
For more information please contact Kathy Wattman at pr@knowbe4.com |
727-474-9950
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
www.businesswire.com

Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
SES Update on Annual General Meeting Agenda14.3.2025 21:41:00 EET | Press release
SES S.A. (“SES” or the “Company”) today issued the following statements in relation to the Company’s upcoming Annual General Meeting (“AGM”), taking place on 3 April 2025: Proposed Additions to SES’s Board of Directors The Company is pleased to propose the addition of two new members, Ellen Lord and John Shaw, to its Board of Directors. Ellen Lord is the former Under Secretary of Defense for Acquisition and Sustainment of the United States Department of Defense and has board experience with listed and non-listed companies, including Voyager Space Holdings Inc., National Defense Industrial Association and Defense Technology Initiative. John Shaw is a former Deputy Commander of the U.S. Space Force and first Commander of the USSF Space Operations Command and Combined Forces Space Component Command. The Company believes that adding the unique and valuable experience and skillsets of Ellen and John to its Board, both of whom bring direct experience in U.S. Department of Defense and U.S. Sp
bd-capital raises €430 million for Second Fund14.3.2025 11:35:00 EET | Press release
bd-capital, the pan-European, operator-led investment firm, is pleased to announce the final closing of its second fund, bd-capital Fund 2 (“Fund 2”), at €430 million. The fund closed more than 20% over its target of €350 million after less than twelve months in the market. With the closing of Fund 2, bd-capital’s assets under management have increased to over €800 million. Commitments to Fund 2 were secured from a diverse cohort of institutional investors, including insurance companies, pension funds, sovereign wealth funds and family offices. In addition to Europe and the Middle East, a significant proportion of capital came from North American investors. bd-capital’s Managing Partners, Andy Dawson and Richard Baker, said: “We are incredibly grateful for the continued support we have received from our existing limited partners and are delighted to have welcomed such a fantastic group of new investors into Fund 2. To have exceeded our fundraising target in a relatively short timeframe
Reply at NVIDIA GTC 2025: How AI Agents and Digital Humans are Redefining Customer Experience14.3.2025 11:00:00 EET | Press release
Reply, a global systems integrator and consulting firm, specialised in AI-driven solutions and intelligent systems, is taking part in NVIDIA GTC 2025, a premier conference hosted by NVIDIA that is focused on the future of accelerated computing and AI, held from March 17–21 in San Jose, California. As part of the event, Roberto Del Ponte, Associate Partner at Infinity Reply, will take the stage for an insightful panel discussion titled “Customer Service 2.0: Transforming Experiences with AI Agents and Digital Humans” on March 19, 2025, from 11:00 AM to 12:00 PM PT. The panel will explore the evolving role of AI-driven customer interactions, focusing on AI agents and digital humans. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250314195701/en/ Reply’s participation in NVIDIA GTC 2025 underscores its commitment to advancing the field of digital humans and emotionally intelligent AI solutions. (Graphic: Business Wire) The disc
Galderma Successfully Placed an Inaugural EUR 500 Million Single Tranche Eurobond and New Dual Tranche CHF 435 Million CHF Bonds14.3.2025 08:00:00 EET | Press release
Galderma Group AG (SWX:GALD): NOT FOR DISTRIBUTION IN THE UNITED STATES OR IN ANY OTHER JURISDICTION IN WHICH SUCH DISTRIBUTION WOULD BE RESTRICTED BY APPLICABLE LAW OR REGULATION. Galderma (SIX: GALD) has made significant progress on its refinancing strategy to spread out its maturity profile, diversify funding sources and reduce its interest costs, by successfully issuing the following bonds: EUR 500 million bond, with a 5-year maturity and a 3.5% fixed-rate annual coupon CHF 190 million bond, with a 4-year maturity and a 1.4025% fixed-rate annual coupon CHF 245 million bond, with a 8-year maturity and a 1.8098% fixed-rate annual coupon The payment dates are March 20, 2025, for the Eurobond and the CHF bonds. The bonds will be listed on the SIX Swiss Exchange. The EUR transaction was led by BNP Paribas, J.P. Morgan, Mizuho, and Santander as active bookrunners, while the CHF transaction was led by UBS and BNP Paribas. Galderma is rated BBB (stable outlook) by Fitch and Fitch is expect
ClickHouse Acquires HyperDX to Accelerate the Future of Observability13.3.2025 17:00:00 EET | Press release
ClickHouse, the company behind the world's fastest analytical database, today announced the acquisition of HyperDX, an open-source observability platform built on ClickHouse. This strategic acquisition reinforces ClickHouse's commitment to delivering the fastest, most cost-effective, and scalable solutions to developers and enterprises worldwide; including observability. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250313954782/en/ ClickHouse, the company behind the world's fastest analytical database, today announced the acquisition of HyperDX, an open-source observability platform built on ClickHouse. (Graphic: Business Wire) The acquisition combines ClickHouse's unmatched performance and scalability with HyperDX's developer-first experience, creating a comprehensive observability platform that seamlessly integrates session replay, exceptions, logs, infrastructure metrics, and distributed tracing through an OpenTelemetry
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom