Boohoo Protects Its Brands and Saves Time and Money with Abnormal

Technology Category

Cybersecurity & Privacy - Application Security
Cybersecurity & Privacy - Cloud Security
Cybersecurity & Privacy - Identity & Authentication Management

Applicable Industries

Apparel
Retail

Applicable Functions

Business Operation

Services

System Integration
Training

The Challenge

Even with a traditional SEG in front of Microsoft 365, employees at Boohoo were receiving credential phishing, invoice fraud, and impersonation attacks, which put funds, data, vendor relationships, and brand reputations at risk. Jonny Concannon, Group Information Security Manager, wanted a better solution—one that improved security, integrated easily, and automated threat detection and response. The team and I wanted an AI-based approach that would look at what normal is, what abnormal is, and patterns of behaviour across the organisation. We have a big team, but we’re a fast-paced organisation, so ease of integration was really important to us. Obviously, integration with Microsoft was a requirement. Tools that could save time on graymail and spam would also help Boohoo keep pace with trends and customer demand, while saving employees time.

About The Customer

Boohoo manages a portfolio of 13 fashion and beauty brands that design, source, market, and sell to millions of customers around the world through online stores. The company, founded in 2006, uses social media, celebrity brand ambassadors, and pop-culture tie-ins like the BarbieTM X Boohoo line to maintain a high profile. That visibility, plus Boohoo’s multiple websites, expansive supply chain, and fast-moving operating model are essential to its success, but they also make the company an appealing target for advanced email attacks.

The Solution

Abnormal offered the features Concannon wanted, including behavioural AI-based inbound email protection that learns normal email behaviour and detects deviations that can indicate compromise and malicious intent. AI also underpins Abnormal’s graymail filtering tool to save time for employees and executives. Abnormal’s auto-remediation capabilities meant Concannon’s team of four could spend less time dealing with manual remediation, remediating compromised accounts, and investigating user-reported phishing attacks. Abnormal works with the native email security tools within Microsoft 365 to provide seamless defence in depth. And because Abnormal integrates via API, setting up a proof of concept takes less than an hour, rather than the days or weeks a new SEG would require. The proof of concept delivered results within hours. What surprised me was the volume of advanced attacks that the SEG was missing, like compromised internal email conversations between our HR teams and our CFO. We realised we needed to do something right away. We had also been considering other security solutions, but once we integrated Abnormal so easily and saw that scary data coming through, the decision was made.

Operational Impact

Abnormal’s dashboard lets Concannon track threat trends, generate reports, and identify threats to use in awareness trainings. We use it to show what our next steps should be.
The Email Productivity module quickly proved its time-saving value for the customer services team and the C-suite. Arriving in the morning and not having 20 emails to file or asking us to block senders is obviously a benefit.
Abnormal delivers the security and time savings Concannon sought—catching advanced attacks, avoiding false positives, and identifying high-risk vendor email accounts.

Quantitative Benefit

Abnormal Inbound Email Security, Email Account Takeover Protection, and Abuse Mailbox Automation save Concannon’s team up to 40 hours per month on email security tasks.
Email Productivity saves the company more than 450 hours per quarter on graymail and spam management.