--- title: "Demonstrating the Value of Data-Centric Security in Retail: Two Case Studies" description: Learn how comforte AG helped two of the biggest retailers to secure their data image: https://insights.comforte.com/hubfs/comforte%20AG_Demonstrating%20the%20Value%20of%20Data%20Centric%20Security%20in%20Retail_Two%20Case%20Studies_11.04.png --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![comforte AG - Demonstrating the Value of Data-Centric Security in Retail: Two Case Studies](https://insights.comforte.com/hubfs/comforte%20AG_Demonstrating%20the%20Value%20of%20Data%20Centric%20Security%20in%20Retail_Two%20Case%20Studies_11.04.png)](https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies) [Mirza Salihagic](https://insights.comforte.com/author/mirza-salihagic) l Apr 11, 2024 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Retail](https://insights.comforte.com/tag/retail) # Demonstrating the Value of Data-Centric Security in Retail: Two Case Studies The retail sector is undergoing profound changes to support digital commerce, personalization and automated buying experiences. It’s not hard to see why. In the US alone, [e-commerce sales](https://www.census.gov/retail/mrts/www/data/pdf/ec_current.pdf) exceeded $1.1 trillion in 2023, a healthy increase of 7.6% on the previous year. Yet with digitization comes additional risk – primarily due to the wealth of highly regulated and sensitive customer data that retailers store and process. The challenge for industry players is to keep regulators happy and breach risks to a minimum, whilst ensuring such data can be used to improve the customer experience and inform long-term business strategy. As two case studies show, comforte’s data-centric security approach and tokenization technology is the perfect fit for the industry. ## Protecting the data that matters Retailers collect a broad sweep of personally identifiable information (PII) including customer names, addresses and payment card details. According to a [Verizon assessment](https://www.verizon.com/business/resources/T6c/reports/2023-data-breach-investigations-report-dbir.pdf) of breaches in 2023, threat actors were most interested in payment (37%), credentials (35%) and personal (23%) data. And with 100% of those incidents motivated by financial gain, it’s not surprising to also see that the vast majority of attacks (94%) came from external sources. Here’s how two different comforte customers approached their unique challenges: ### Commercial City Fresko [This Mexican hypermarket](https://www.comforte.com/resources/success-story-city-fresko-achieves-pci-dss-compliance-with-tokenization) giant owns popular brands such as s La Comer, City Market, Fresko and Sumesa – which collectively process over 30 million POS transactions each year on ACI’s BASE24 system. The company’s challenge was to get a new data protection system up and running for PCI DSS compliance within just six months – or risk regulatory fines, an increase in interchange fees, and reputational damage. Other requirements included: - A system compatible with HPE NonStop systems and ACI BASE24 environments - A robust algorithm to replace parts of the PAN with tokens that hackers can’t use - A secure vault using dual control that stores the relationship between tokens and PANs - A system that can be plugged in without changes to existing applications - Effective user authentication to mitigate insider and third-party risk City Fresko chose comforte’s SecurDPS solution to tick all of these boxes and more. Its tokenization capabilities render sensitive data useless to hackers, while helping to meet PCI DSS requirements that no sensitive data resides on core enterprise components. As only authorized users can access the data, third-party vendor risk is also reduced. Overall, it has reduced the organization’s breach and PCI DSS compliance risks and helped to cement its reputation as a reliable and security-conscious partner. ### A world-leading fashion retailer [This renowned fashion retailer](https://www.comforte.com/resources/success-story-one-of-the-worlds-largest-fashion-retailers-chooses-tokenization), one of the world’s largest, has around 900 stores in North America, and accepts all major cards including – for the past three decades – its own private label credit card. However, after an unfortunate data breach, it needed to add an extra layer of protection to the encryption already used to guard card numbers and unique internal ID numbers associated with each card. Specifically, it was looking for a provider that could offer: - A way to seamlessly extend data protection to cardholder PII, and potentially other data types in the future - An operationally efficient method of data protection. The retailer found encrypting and decrypting data at various stages in its lifecycle across a high transaction volume (in-store and online) risked slowing down authorizations and damaging brand reputation - A method of data protection that didn’t require the mass rotation of encryption keys for around one billion credit cards – which was adding a significant cost and operational burden - A solution which enables data to be preserved in the same format when protected to retain its utility The solution was comforte’s tokenization technology, which differs from classic encryption because it doesn’t require encryption keys or key management. This not only reduced the operational and cost burden of key management but also minimized the risk of sensitive data exposure. Tokenization also supports utility because it effectively replaces a 16-digit credit card number with a 16-digit token, or an 11-digit phone number with an 11-digit token, for example. This allowed the retailer to use the data across the enterprise and throughout the lifecycle of each customer without compromising on security. The result is that comforte has been able to reduce the retailer’s PCI DSS audit scope and put it in a strong position to comply with other data privacy laws in the US, both now and in the future. That’s the peace of mind that retailers are looking for as they navigate the evolving regulatory landscape to achieve digital success. --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/demonstrating-the-value-of-data-centric-security-in-retail-two-case-studies&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## Case Study: City Fresko achieves PCI-DSS compliance with tokenization Click the button below to download the case study: [![Download Case Study](https://no-cache.hubspot.com/cta/default/4026697/674e5f21-2dd7-4c72-87f7-7c0511122eb9.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/674e5f21-2dd7-4c72-87f7-7c0511122eb9) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026