Convenience retailers are encouraged to review their cyber security measures following a number of cyberattacks on the retail sector in recent weeks.
To help c-store retailers remain alert and be aware, Association of Convenience Stores (ACS) is reminding retailers to check the crime guidance present on the ACS website which is based on the National Cyber Security Centre Small Business Guide.
Below are the security measures retailers advised by ACS::
- Back up your data, regardless of the business size. It is important to take regular backups of important data and ensure that these are stored separately from your computer and can be restored.
- Protect from malware by installing anti-virus software, putting up firewalls, and keeping IT equipment updated with the latest software updates. Reduce your colleagues’ abilities to download software and control the use of USB drives in your business.
- Keep smartphones and tablets safe by switching on password protections, keep your device and apps updated, and ensure that your device can be tracked in the case that they are lost or stolen. Avoid using unknown public wi-fi hotspots.
- Strengthen your passwords. The NCSC advises that you choose three well-chosen random words that can be quite memorable but not easy to guess.
Retailers should also be aware of phishing emails and what these might look like.
Phishing emails are reported as the most common type of cybercrime experienced by convenience retailers which pose as fake emails asking for sensitive information. You should consider the following actions:
- Minimise colleagues’ IT interactions, giving them the lowest level of user rights needed to perform their jobs.
- Look out for common tricks, which include sending an invoice for a service you have not used or emails that impersonate members of your team
- Report all attacks and forward phishing emails to report@phishing.gov.uk. If you have been a victim of online fraud, report it to Action Fraud here.
- Check for obvious signs in phishing emails, such as poor spelling and grammar mistakes.
ACS guidance on cybercrime is available to download here: https://cdn.acs.org.uk/public/Crime%20Guidance%20Images/ACS%20Crime%20Guidance%202025%20Cyber%20Crime.pdf
association of convenience storesconvenience retailerscrime guidancecyber security measuresfirewallsnational cyber security centrecyber security in retailcyber security convenience retailersacs cyber security guidance 2025uk retail cyberattacks 2025phishing emails retail ukm&s cyberattack 2025convenience store cyber protectionuk retail sales april 2025cybercrime prevention retailers