Retailers are still not taking IT security seriously enough, according to research by Deloitte.

It has found that 80 per cent of companies do not have a formally defined information security strategy and 86 per cent have never performed an inventory to understand where their data is stored and how it is transmitted.

Deloitte consumer business partner Andy Morris said: “The shift in motive for computer crimes, from demonstrating skills to profit, has increased both the sophistication of and the damage done by attacks.

“The consumer business industry must recognise the fact that it is vital to have a solid security programme in place in order to combat the increasing risks associated with breaches – be they from internal or external sources. Managing such risks requires flexibility and is as much about people and culture as process and technology.”

Marks & Spencer in data breach over stolen laptop