A cybersecurity firm rings the alarm on a potential drastic increase in hacks, breaches and scams as America heads into its busiest shopping days of the year, with AI agents now a prime target.
KnowBe4 says the surge of digital traffic and heavy transaction volume during Black Friday and Cyber Monday creates conditions that attackers routinely exploit, as rushed staff, overloaded systems and seasonal hires increase the chances of a breach.
“During these periods, the increased digital traffic, higher email volume and IT team overload create a ‘perfect storm’ of risk. The scenario is further aggravated by factors typical of the retail sector, such as the use of untrained temporary employees and the complexity of multichannel environments that combine physical stores, e-commerce, apps and payment systems.”
The firm says the retail industry is one of the most targeted sectors in the world, citing a recent IBM study showing that a system breach in retail costs $3.48 million, on average, in 2024.
KnowBe4 warns that phishing attempts and fraudulent messages spike during peak shopping days. Attackers rely on realistic system alerts, password resets or delivery notifications to slip past distracted workers. The firm also says that attackers are not just targeting employees but AI agents as well.
Says Javvad Malik, lead CISO advisor at KnowBe4,
“Black Friday creates the perfect storm for cybercriminals. With retail teams under pressure, attackers know this is when organizations are at their most vulnerable, and we see an increase in attacks. Retailers should be preparing their workforce, just as much as their technology. When employees are rushed, they are far more likely to click on a malicious link or approve something that does not look right. Clear guidance and strong processes are essential to keeping both customer and company data safe in the weeks ahead.”
Last week, Visa warned that bad actors are targeting consumers who use AI agents to shop on their behalf, leading to a 40% surge in malicious bot transactions in the US.
Disclaimer: Opinions expressed at CapitalAI Daily are not investment advice. Investors should do their own due diligence before making any decisions involving securities, cryptocurrencies, or digital assets. Your transfers and trades are at your own risk, and any losses you may incur are your responsibility. CapitalAI Daily does not recommend the buying or selling of any assets, nor is CapitalAI Daily an investment advisor. See our Editorial Standards and Terms of Use.