Study: Cyber Monday Attacks Cost Enterprises Up To $3.4M Per Hour
The upcoming holiday shopping season could be prime time for attackers who hope to catch enterprises at their weakest moment, according to a study published this week.
a new survey of 1,100 retail companies conducted by the Ponemon Institute
and sponsored by RSA, daily revenue surges by an average of 55% during the holiday season. If a retail site is hacked or disabled, average losses may amount to as much as $500,000 per hour, or $8,000 per minute.
Two thirds of respondents (66 percent) said that such a disruption would also result in customer churn that would damage reputation and brand, pushing losses as high as $3.4 million from a single hour of disruption.
“This time of year is not just an opportunity for retail fraud, but an opportunity to launch attacks that take advantage of business logic vulnerabilities, DDoS [distributed denial of service] attacks, and more sophisticated attacks as well,” says Demetrios Lazarikos, IT threat strategist at RSA.
Yet while 64% of organizations said they see significant increases in attack activity during the holidays, more than 70% of organizations do not take additional precautions in anticipation of increased attacks. And with their currently-installed technology, 51% say that they do not have real-time visibility into Web traffic, making it difficult to identify the root cause of such attacks, the study says.
Just 23% of respondents said they feel that most holiday-season attacks can be quickly detected and remediated.
The report also identifies the top nine attacks organizations will likely face during the holiday season. In order of likelihood, these attacks are:
1. Botnet and Distributed Denial of Service (DDoS)
2. App store fraud
3. Mobile access/account compromise
4. Click fraud
5. Stolen credit card validation
6. eCoupon abuse
7. Account hijacking
8. Electronic wallet abuse
9. Brand promotion hijacking
“We expect to see more of these attacks this year, and more attacks targeted at specific companies,” says Lazarikos.
Have a comment on this story? Please click “Add a Comment” below. If you’d like to contact Dark Reading’s editors directly, send us a message.