Travel Retail Norway Strengthens Cybersecurity with Active Focus After Cyber Attack
Securing the Retail Industry
“Following the cyberattack we experienced in early 2024, we wanted to explore new ways to increase and strengthen our cybersecurity measures. We already employ a range of advanced solutions, but by choosing Active Focus from River Security, we have gained something new: The ability to efficiently map our entire externally exposed digital attack surface and continuously monitor, penetration test, and identify risks and hackable vulnerabilities on it. Our partnership with River Security helps us find and mitigate these before they can be exploited.”
– Linda Brenden, Chief Digital Officer, Travel Retail Norway
Introduction
Travel Retail Norway (TRN), which operates tax-free sales at Norway’s busiest airports—including Oslo, Bergen, Stavanger, and Trondheim—faced a significant challenge in 2024 when it became the target of a cyberattack. The incident forced TRN to temporarily suspend its Click & Collect service, disrupting online sales and customer communications. This event highlighted the vulnerabilities of digital systems and underscored the need for a stronger, more proactive cybersecurity framework.
Challenges
When the attack was detected, TRN acted swiftly to secure its online platforms and prevent further damage. While no customer data was compromised, the incident exposed the growing risks associated with digital threats. The temporary suspension of core services emphasized the importance of implementing a solution that not only addressed immediate risks but also provided long-term protection by identifying and mitigating vulnerabilities before they could be exploited.
Solution
Following the cyberattack, TRN partnered with River Security to enhance its cybersecurity capabilities. River Security’s Active Focus service was chosen for its innovative combination of traditional external attack surface management with continuous expert-led penetration testing.
Active Focus enables TRN to maintain full visibility of its digital attack surface, providing real-time monitoring, actionable threat intelligence, and expert-moderated vulnerability assessments. This comprehensive solution ensures that changes to TRN’s externally exposed attack surface are continuously tested for risks.
Outcomes
- Proactive Cyber Defense: Active Focus has empowered TRN to take a proactive stance on cybersecurity by identifying hackable vulnerabilities before they can be exploited, safeguarding customer-facing services.
- Prevention of Exploitable Vulnerabilities: Continuous micro-penetration testing minimizes the window of opportunity for cybercriminals to exploit weaknesses.
- Operational Resilience: TRN has bolstered its ability to ensure business continuity in the face of evolving digital threats.
Conclusion
Travel Retail Norway’s commitment to strengthening its cybersecurity after the 2024 attack has positioned the company among the leaders in the retail sector, proactively identifying and addressing cybersecurity vulnerabilities. By partnering with River Security and implementing Active Focus, TRN has ensured that vulnerabilities are addressed before they can impact operations or compromise customer trust.
With continuous digital attack surface management, which includes always-on penetration testing and expert support, TRN has substantially increased its resilience, allowing the company to focus on delivering exceptional service to travellers across Norway’s major airports.
Facts
Travel Retail Norway (TRN) is a Norwegian company, 50% owned by the German tax‑free giant Heinemann, with Norway’s largest retail conglomerate, Norgesgruppen, indirectly holding a significant stake. Since 2005, TRN has operated duty‑free and Travel Value shops at airports managed by Avinor—the Norwegian state‑owned company responsible for operating most of the country’s airports—including those in Oslo, Bergen, Stavanger, and Trondheim. Its primary objective is to ensure responsible sales and provide quality service to travelers at Avinor’s airports while generating revenue for Avinor and Norwegian society.
