Securing The Retail Sector: How Betts Tackled Dark Web Threats

In an era where cyber threats are more sophisticated than ever, businesses must be proactive in securing their digital assets. One of the biggest risks to Australian retailers today is the dark web, where stolen customer data, employee credentials, and corporate intelligence are actively traded. This case study examines how Oko, Australia's only dedicated AI-driven dark web monitoring solution helped Betts Group, a leading Australian retailer identify and mitigate potential cyber threats before they could escalate.

About Betts Group

Betts is one of Australia’s most recognisable fashion retailers, known for its deep, rooted legacy in the footwear industry. Founded in 1892, the first store was opened on Hay Street in Perth City in 1912 and became the biggest shoe store in the country. Throughout the 1940’s and 50’s, it continued to be the biggest store in Australia and following a major refit in 1951, it became the biggest shoe store in the Southern Hemisphere. Currently Betts has 60 locations Australia-wide, and remains one of the most well established fashion brands in Australia.

For more information visit: https://www.betts.com.au/

Dark Web Threats for Australian Retailers

The retail and fashion industry is a prime target for cybercriminals, with attackers constantly seeking to exploit leaked customer information, payment details, and corporate intelligence. Australian retailers, particularly established brands with a national presence, face growing cyber threats that can lead to:

• Stolen Customer Data – Leaked databases with payment details, loyalty program information, and personal identifiers are frequently sold on the dark web.
• Compromised Employee Credentials – Attackers use stolen employee login details for phishing campaigns, fraud, or unauthorised access.
• Brand Reputation Damage – Public data breaches erode consumer trust and can lead to severe financial and legal consequences.
• Supply Chain Vulnerabilities – Attackers target third-party vendors to infiltrate retail networks.
• Fraudulent Gift Cards & Discount Abuse – Cybercriminals share discount codes, exploit loyalty points, or generate fraudulent transactions using compromised accounts.

Recognising these risks, Betts engaged Rivanorth to evaluate its exposure and mitigate threats proactively.

Key Areas Investigated

During the assessment, we conducted an extensive investigation using Oko to provide Betts with a clear understanding of its exposure on the dark web and actionable steps to enhance security. This process reassured Betts that it had full visibility into potential threats and the necessary measures to mitigate them.

1. Employee Credential Exposure Review – We examined whether employee login details had been leaked in past data breaches and assessed their potential impact on corporate security.
2. Dark Web Threat Intelligence – We analysed dark web forums and marketplaces for any discussions or indicators of fraudulent activity linked to Betts.

3. Dark Web Exposure Mapping – We investigated the extent to which the company's sensitive data, including credentials, internal documents, and operational details, had surfaced on the dark web, providing critical insights into potential attack vectors.

4. Fraud Prevention & Transaction Security Assessment – We assessed underground discussions around potential fraudulent transactions and abuse related to Betts’s digital infrastructure.

By conducting this investigation, Betts gained valuable assurance that it was aware of its presence on the dark web, understood its security risks, and had the necessary insights to strengthen its access control policies and overall cybersecurity posture.

The Importance of Continuous Dark Web Monitoring for Retailers

The insights from this excercise reinforced the importance of continuous dark web monitoring for retailers. Threat actors don’t just target financial institutions, they increasingly focus on retailers with large customer databases and high transaction volumes.

For fashion retailers in Australia, dark web monitoring offers key advantages:

• Early Detection of Data Leaks – Identifying breaches before they result in financial loss or reputational damage.
• Prevention of Credential-Based Attacks – Protecting employees and customers from phishing and account takeovers.
• Fraud Mitigation – Detecting and preventing fraudulent transactions, discount abuse, and loyalty point scams.
• Enhanced Supply Chain Security – Ensuring third-party vendors and partners don’t become an entry point for cybercriminals.

Why Continuous Monitoring with Oko is Essential

A one time assessment provides valuable insights, but cyber threats evolve daily. Without ongoing monitoring, businesses risk falling victim to new data leaks, fraud tactics, and evolving cyber threats.

Oko’s AI-driven dark web monitoring helps businesses stay ahead by:

• Providing real time alerts when corporate or customer data appears on the dark web.
• Tracking cybercriminal activity targeting a specific brand or industry.
• Offering actionable intelligence to remediate security risks before they lead to a breach.

• Monitoring third-party breaches that may expose the company's data, ensuring proactive risk mitigation and supply chain security.

By leveraging continuous dark web monitoring, Australian retailers can safeguard their customer data, protect their brand reputation, and mitigate evolving threats before they become a crisis.

Conclusion

This case study underscores the growing cyber risks facing Australian retailers and the critical role of dark web monitoring in preventing data breaches and fraud. The insights from the investigation allowed Betts to proactively mitigate risks, strengthening its cybersecurity posture.

However, cyber threats don’t stop, and neither should your security strategy.

Want to know if your business data is on the dark web? Contact us today to get started.