Skip to main content
Marsh logo

Report

New wave of cyberattacks: Key lessons and why other sectors should take note

Comprehensive guide on cyber retail threats, detailing attack vectors, notable incidents, and practical strategies to bolster defences and resilience, insights.
Download the report

10/21/2025

Recently, there has been a notable increase in cyberattacks that utilise social engineering as an initial entry point. Threat actors such as Scattered Spider, UNC6040, Shiny Hunters, and others are actively employing social engineering tactics against large global organisations.

These attacks have impacted organisations in the retail, insurance, aviation, and manufacturing sectors, but no industry is immune to their tactics. In this whitepaper, we will examine the motivations and tactics of these key threat actors, discuss practical steps to mitigate cyber risk, and explain why now is a good time to invest in insurance and incident response planning.

Use this whitepaper to: 

  • Recognise the core cyber threats facing UK retail, including POS malware, phishing, ransomware, supply‑chain breaches, and data exfiltration.
  • Recognise typical attack sequences and their business impacts, such as downtime, costs, regulatory exposure, and reputational risk.
  • Learn how to translate threat intelligence into prioritised security controls and concrete actions.
  • Grasp governance, risk management and policy fundamentals to design, monitor, and improve a security programme.
  • Identify essential technical architecture and controls, including network segmentation, least-privilege access, secure payments, endpoint protection, patching, and asset inventories.
  • Understand detection and response foundations, including SIEM, threat hunting, incident response playbooks, tabletop exercises, backups, and disaster recovery planning.