Retail sector faces rising cybersecurity risks from customer apps

The retail and service industries are increasingly becoming targets for cyberattacks, specifically through customer-facing applications and APIs. Recent incidents, such as the leak of approximately 2.15 million Lawson ID records, highlight how digital touchpoints intended for marketing and convenience—such as point balance inquiries and membership services—are being exploited by attackers.

Security analysis indicates that attackers are now utilizing AI to rapidly identify vulnerabilities and entry points within these digital services. A significant challenge for many companies is that these applications are often developed by marketing or business departments through third-party contractors, meaning central IT departments may lack a complete overview of all active digital entry points, creating security gaps.