70% of retail and hospitality CISOs report that AI has been added to their scope of responsibility.

35% of retail and hospitality CISOs plan to increase full-time security staff in 2026.

71% of retail and hospitality CISOs identify AI as a primary concern, citing risks such as data leakage, insider misuse, and insufficient governance controls.

In 2025, security spending increased from 0.57% to 0.75% of revenue in the retail and hospitality industry.

Hospitality, Travel & Recreation recorded a 30% year-over-year increase in attacks in March 2026.

Hospitality has 6% consumer trust

Nearly 90% of retail and hospitality CISOs expect spending on AI-related security initiatives to rise, often through reallocating existing budgets rather than adding new funds.

54% of retail and hospitality CISOs expect budget increases in 2026.

In 2025, IT spending rose from 3.2% to 3.9% of revenue in the retail and hospitality industry.

The High Technology industry has 35.5% and the Travel and Hospitality industry has 18.3% of organizations classified as 'Exceptional' in AppSec maturity.

Travel & Hospitality, Gambling, and Real Estate led the way with the highest combined rates of full and partial protection against bots.

Industries like hospitality resolve serious findings significantly faster than the financial services industry (61 days vs 20 days).

Healthcare’s median time to resolve serious pen test findings was 58 days. This ranks healthcare 10th of 13 industries. Hospitality led with 20 days.

The Construction, Hospitality, and Arts and Entertainment sectors reported their highest ever Q2 2025 ransomware attack volumes.

In one analysis, hospitality had 15% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, hospitality had 15% of vulnerable assets across cloud, APIs, and web applications.

30% of hotels do not have plans to outsource to a managed security service provider (MSSP)

66% of hotels are investing in VPNs.

72% of hotel IT and security executives identified payment systems and point-of-sale (POS) technology as the most vulnerable guest-facing technology.

32% of hotel IT and security leaders say a significant increase in credit card transactions will increase their cybersecurity risk during the busy travel season.