Customer data leaked at a retailer serving 4.8 million. That figure is the customer base, not the affected count — and the distinction keeps getting lost.
837 incidents, 419 confirmed breaches. The 418 that never became a disclosure are the sector’s real attack volume.
A retailer and a bank suffering identical intrusions produce very different invoices, and the difference is regulation rather than damage.