Corporate | Report

Retail data breaches report: Q1 2025 (June & July 2025)

Summary

Recent observations have shown that the retail sector has seen a notable shift in cyber criminal activity, with ransomware attacks now outpacing traditional data breaches. This trend highlights an evolving threat landscape where financially motivated threat actors are increasingly targeting retail organisations through extortion-driven campaigns.

Overall cyber activity showed a decline towards the end of the month, attributed to the geopolitical tensions surrounding the IranIsrael conflict. This global event appears to have diverted the focus and resources of various threat actors and ransomware groups, leading to a temporary reduction in broader malicious operations.

Complete the form below to download or view this content:

PROVEN SOLUTIONS

Trusted by leading brands

“The Boxphish platform has helped us raise cyber awareness across our business and build a real culture of security. We issue tailored Boxphish training content monthly to all colleagues. The videos are short, punchy and relevant for work and home life and can be completed any time on any device without impacting the day job. This regular bite size training is helpful in repeating best practice messages, helping us to protect both ourselves and our company.”

Organisational Design & Development Manager
Eurocell

“Boxphish has very quickly had a brilliant impact on the security culture at the council. The content of the educational modules and simulations are really well thought out, accessible and engaging across the whole workforce, meaning they can be used very effectively right out of the box. Implementing, running and maintaining the system requires very little administration – a huge advantage for small teams with limited resources.”

Principle Information Security Officer
North Lincolnshire Council

“The training courses delivered via the Boxphish platform have been well received by our employees and we are seeing great results. Traditional training methods can be extremely long-winded, taking hours, if not days. Being able to deliver training content frequently but with minimal effort from an administration point of view has been incredibly valuable. The content is short, snappy and to the point, and this has had a positive impact on employee engagement levels and overall completion rates.”

Information Security Advisor & Data Protection Officer
Robertson

“Boxphish offer a wide range of phishing simulations ideal for educating our staff. They’re quick to setup and send, and easy to report on. Being able to identify the weaker spots within our growing Multi Academy Trust has allowed us to be really targeted with our training and we’ve seen great results so far.”

Head of IT
NPCAT

“Great product and fantastic personal service from the Boxphish team.”

Head of Information Technology
Port of Tyne

“Working with Boxphish has enabled me to efficiently deploy an automated cyber awareness programme so I can feel confident we are doing everything we can to educate our end users on the evolving cyber threats, it has been a great experience using the platform.”

IT Manager
Leicester Tigers

“Boxphish has made our transition into this market seamless, and the support from the Boxphish team from the initial contact with the customer to the onboarding has been exceptional.”

Director
Halo-IS

Ready to transform your cyber culture? Book a demo today!

Book a demo