Data Point

Wireless in Retail: The Risks and Rewards

An RSR report identifies the dangers of wireless technologies (remember TJX's nightmare?) and offers three ways to ensure your company doesn't suffer a data loss during the holiday season.

November 27, 2007 — CIO — Wireless is everywhere. You just can't see it. And that's one big problem for the retail industry, where wireless equipment in both the back rooms and show rooms are ever present today. But just how secure are they?

A new research report by Retail Systems Research (RSR) partner Steve Rowen details the growing dependence on wireless technologies and monumental risks posed by the new breed of devices. "In the store, wireless devices have made for enhanced consumer experience, better customer service and accurate, cost-effective transmission of transaction and inventory data," Rowen writes in the "Safe without Wires: The Value of Securing Wireless Technologies" report. "In the supply chain, particularly the distribution center, wireless technologies have proven incredibly valuable as well, helping convert data transmissions and operational events into highly efficient processes."

Rowen also describes the "polarizing paradox" found inside today's retailer: The massive pull from one side to provide enhanced customer service is challenged by the constant need to cut costs. "In order to differentiate themselves from competitors, retailers are also challenged to provide a heightened shopping experience to the time-starved, tech-savvy 21st century customer, while also satisfying shareholders," he writes. "All of this is to be achieved with a perennially limited technology budget."

As a result, Rowen maintains that retailers have changed their focus from technologies that only streamline efficiency to those that additionally address a higher order of needs. "Wireless is an ideal solution to meet such needs," he contends, "and increasingly becoming a means to do so at a manageable price point."

But all that advancement has come at a cost many retailers have discarded like the items on the clearance rack: wireless brings increased risk. One needs to look no further than the massive TJX Companies customer data breach that began when thieves targeted unsecured wireless price-checking devices at a Marshall's (which is one of TJX's businesses) clothing store Minnesota. That "back door" eventually led the thieves to TJX's central databases—and nearly 50 million credit and debit card numbers in 2005.

What's worse, Rowen says, is that those with motive and technological savvy "have identified retailers' lackadaisical treatment of data flow as a viable opportunity, extending well within the reach of highly organized crime factions," Rowen writes. "Theft of retailers' customer data is no longer just for 'hacks;' it has become very big business." And even though Rowen contends that the Payment Card Industry's Data Security Standard has pushed retailers to examine their security practices, a quick scan of the daily news ("Another Data Breach") shows that there's much more work to be done.