In 2025, IT spending rose from 3.2% to 3.9% of revenue in the retail and hospitality industry.

35% of retail and hospitality CISOs plan to increase full-time security staff in 2026.

71% of retail and hospitality CISOs identify AI as a primary concern, citing risks such as data leakage, insider misuse, and insufficient governance controls.

In 2025, security spending increased from 0.57% to 0.75% of revenue in the retail and hospitality industry.

Hospitality has 6% consumer trust

Nearly 90% of retail and hospitality CISOs expect spending on AI-related security initiatives to rise, often through reallocating existing budgets rather than adding new funds.

70% of retail and hospitality CISOs report that AI has been added to their scope of responsibility.

54% of retail and hospitality CISOs expect budget increases in 2026.

Hospitality, Travel & Recreation recorded a 30% year-over-year increase in attacks in March 2026.

The High Technology industry has 35.5% and the Travel and Hospitality industry has 18.3% of organizations classified as 'Exceptional' in AppSec maturity.

Industries like hospitality resolve serious findings significantly faster than the financial services industry (61 days vs 20 days).

Travel & Hospitality, Gambling, and Real Estate led the way with the highest combined rates of full and partial protection against bots.

Healthcare’s median time to resolve serious pen test findings was 58 days. This ranks healthcare 10th of 13 industries. Hospitality led with 20 days.

The Construction, Hospitality, and Arts and Entertainment sectors reported their highest ever Q2 2025 ransomware attack volumes.

In one analysis, hospitality had 15% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, hospitality had 15% of vulnerable assets across cloud, APIs, and web applications.

66% of hotel IT and security executives expect a rise in attack frequency during the summer 2025 travel season.

42% of hotel IT and security executives say weaknesses in third-party systems like payment processors and booking platforms increase their cybersecurity risk.

Adoption of dark web monitoring among hotels is 26%.

Adoption of penetration testing among hotels is 28%.