Retail & Consumer — Cyber Threat Activity
Threat actors, incidents and malware targeting the Retail & Consumer sector — 591 recorded incidents and 98 tracked groups.
- Recorded incidents: 591
- Incidents, trailing 180 days: 309
- Tracked threat actors: 98
- Malware families: 88
Recent incidents
- Hope's Windows 2026-08-06
- Al-Futtaim Group 2026-08-05
- udhaiyamdhall.com 2026-08-05
- pricemodern.com 2026-08-05
- Festina Group 2026-08-05
- Yost Home Improvements 2026-08-04
- Sanrio Hong Kong Co., Ltd 2026-08-04
- azn.co.jp 2026-08-03
- Winn-Dixie 2026-08-03
- countrymotors.com.mx 2026-08-02
- Asset Flooring Group Australia 2026-08-02
- Commercial Furniture Interiors 2026-08-01
- The Butcher Brothers 2026-08-01
- Clear Vision Signs 2026-07-31
- A101 2026-07-31
- RE/MAX 1st Choice 2026-07-30
- Tesco Engineer 2026-07-27
- Wilbert's 2026-07-27
- moebelmayer.de 2026-07-27
- Although the company in its current industrial form 2026-07-27
Threat actors targeting Retail & Consumer
- Qilin 84 incidents
- Cl0p 65 incidents
- Akira 55 incidents
- SafePay 34 incidents
- Play Ransomware 33 incidents
- INC Ransom 28 incidents
- The Gentlemen 27 incidents
- ShinyHunters 26 incidents
- DragonForce 22 incidents
- Medusa Ransomware 15 incidents
- RansomHub 13 incidents
- NightSpire 12 incidents
- LockBit 11 incidents
- Lynx Ransomware 11 incidents
- Cactus 10 incidents
- Krybit 10 incidents
- Stormous 9 incidents
- Coinbase Cartel 8 incidents
- BlackNevas 6 incidents
- M3rx 6 incidents
- Settra 5 incidents
- Global Secret Group 5 incidents
- Nova 5 incidents
- Payload 5 incidents
Where these victims are
- United States 312
- Canada 34
- Germany 27
- Italy 18
- United Kingdom 18
- Australia 16
- Brazil 12
- Spain 11
- France 10
- Mexico 7
- Japan 6
- Thailand 6
Malware used against Retail & Consumer
Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.
- BlackCat Malware
- Clop Malware
- Cobalt Strike Malware
- Impacket Tool
- Mimikatz Tool
- PlugX Malware
- PsExec Tool
- REvil Malware
- Ryuk Malware
- TrickBot Malware
- AdFind Tool
- BloodHound Tool
Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.