{"id":8093,"date":"2020-08-17T10:39:00","date_gmt":"2020-08-17T10:39:00","guid":{"rendered":"https:\/\/www.securitytoday.de\/2026\/04\/02\/post_id-2239\/"},"modified":"2026-07-04T12:26:16","modified_gmt":"2026-07-04T12:26:16","slug":"how-retailers-can-protect-themselves-from-cybercriminals","status":"publish","type":"post","link":"https:\/\/www.securitytoday.de\/en\/2020\/08\/17\/how-retailers-can-protect-themselves-from-cybercriminals\/","title":{"rendered":"How Retailers Can Protect Themselves from Cybercriminals"},"content":{"rendered":"

Cyberattacks can drive e-commerce businesses into ruin. But how can you defend yourself?<\/span><\/b>\u00a0<\/span><\/b>Here\u2019s how to fight back against identity theft, fake vouchers, and other attacks.<\/span><\/b>\u00a0<\/span><\/p>\n

Fake Gift Cards<\/span>\u00a0<\/span><\/h2>\n

An easy trick for hackers: Buy several gift cards from their intended victim and try to figure out the algorithm behind the code. Once cracked, attackers have free rein to generate their own gift card codes – using them personally or selling them.<\/span>\u00a0<\/span><\/p>\n

How can you defend against this?\u00a0<\/span>–\u00a0<\/span>Use complex algorithms. Never underestimate your adversary. Also, only activate gift card codes in your online store <\/span>after<\/span>\u00a0they\u2019ve been purchased. That way, hackers have no chance with their counterfeit currency.<\/span>\u00a0<\/span><\/p>\n

Fraudulent Refunds<\/span>\u00a0<\/span><\/h2>\n

Peak season is approaching again, and this type of attack is most dangerous and most common during this time – so be prepared.<\/span>\u00a0<\/span><\/p>\n

An invoice for a product that was never ordered, or an order that was placed but the customer claims never received. It\u2019s hard to believe, but many retailers don\u2019t notice until it\u2019s too late. During peak season, retailers often lack both the capacity and technical tools to verify every claim, and money quickly slips away.<\/span>\u00a0<\/span><\/p>\n

There are both complex and simpler solutions. Thoroughly verifying who bought what and tracking shipments is labor-intensive but pays off in your year-end balance.<\/span>\u00a0<\/span><\/p>\n

To make this process more efficient, integrate interfaces with other systems or external partners to automate and verify which deliveries were actually made and who the real buyer is.<\/span>\u00a0<\/span><\/p>\n

DDoS Attacks (Blocking Online Shops)<\/span>\u00a0<\/span><\/h2>\n

The goal of a DDoS attack (Distributed Denial-of-Service) is to temporarily disable an online shop. Attackers achieve this by flooding the site with an extremely high volume of targeted requests. This overload blocks the service, potentially causing significant damage to retailers during high-traffic periods like Black Friday or Christmas.<\/span>\u00a0<\/span><\/p>\n

There are two ways to defend against such attacks. Scalable cloud infrastructures allow companies to quickly scale up resources and defend themselves with additional capacity. Second, comprehensive monitoring combined with an incident response plan helps. This plan outlines exactly what steps to take in an emergency, so the right measures can be initiated as soon as an attacker is detected.<\/span>\u00a0<\/span>
\n <\/p>\n

Key Facts<\/h2>\n

Cost per incident:<\/strong> A successful phishing attack costs companies an average of 4.76 million Euro.<\/p>\n

Social Engineering:<\/strong> 98 percent of all cyberattacks involve at least one form of social engineering.<\/p>\n

Frequently Asked Questions<\/h2>\n

Every question is locked. A tap unlocks the answer.<\/p>\n

\nWhat\u2019s the difference between data protection and data security?<\/strong><\/summary>\n

Data protection governs the lawful handling of personal data (legal basis, purpose limitation, individual rights). Data security includes the technical and organizational measures to protect all data from loss, manipulation, or unauthorized access.<\/p>\n<\/details>\n

\nDoes every company need a Data Protection Officer?<\/strong><\/summary>\n

In Germany, a Data Protection Officer is mandatory if at least 20 employees regularly process personal data using automated systems, or if special categories of data (e.g., health data) are processed.<\/p>\n<\/details>\n

\nWhat rights do individuals have under the GDPR?<\/strong><\/summary>\n

The right to access, rectification, erasure, restriction of processing, data portability, and the right to object. Companies must respond to requests within one month.<\/p>\n<\/details>\n

Related Articles<\/h2>\n