Founded in 1977, GMG is a global retailer, distributor and manufacturer of sporting goods and food and health products that markets 120 brands in 12 countries. The conglomerate in recent years has undergone two significant efforts: a rebranding to make GMG more recognizable, and a broad digital transformation to enhance its operations, drive growth and improve the customer experience. While the two projects have been highly successful, an unfortunate outcome is that GMG has increasingly been the target of cyberattacks. “GMG has been one of the most active brands in the Gulf region and that has put the business in the limelight,” said Prabhat Kumar Prabhat, IT Director, Technology and Security for GMG. “As a result, we have seen a significant increase in cybersecurity incidents. One of the critical elements of our security management is ensuring customer and user data is safe so everyone feels confident.” GMG had been using legacy antivirus tools to protect its endpoints, but it soon became obvious the outdated technology was insufficient to protect against the increasingly sophisticated attack methods of the modern threat landscape. Prabhat and his team were no longer 100% sure they were capturing every incident. “Threats today are far more intelligent than they have been in the past,” he said. “It is not just the good guys using technologies like artificial intelligence (AI); the bad guys are using them as well. When we did spot an incident, it was difficult and complicated to deal with because of the time and effort required to quarantine and clean the affected device.” “To stop these threats, we needed a solution with similar or better intelligence than the threats,” Prabhat continued. “For instance, it had to be probability-based and use historical data analytics, as well as automated to stop threats before they could enter our environment.”

GMG faces upward of 10,000 malware and phishing attacks a month, a situation Prabhat said can be “very dangerous, unpredictable and scary.” Yet he quickly noted that very few if any of those incidents have been able to break through their security defenses. “While we have multi-layered security, a lot of credit for that success must go to CrowdStrike,” Prabhat said. “Whether it is one or 10,000 attacks, the way CrowdStrike protects our customers, staff and data is amazing.” Security at GMG has changed significantly in other ways since Falcon Complete was deployed. Previously, the security team dealt with around five incidents per month, each requiring the compromised device to be shut down and reformatted, locking out the user in the process. This could take days and involve two or three skilled people. After deploying Falcon Complete, Prabhat saw his team’s incident remediation drop dramatically — cutting machine recovery and reprovisioning to one or two incidents per year, a reduction of 96%. In addition, threat investigations are usually closed within 12 hours instead of 3-5 days, and user productivity is improved since users no longer need to wait for device repairs to get back to work. For Prabhat, the contrast is stark when compared to not having CrowdStrike. “With CrowdStrike, when there is an incident, I rarely have to do anything,” he said. “The process is seamless and resolves quickly and easily,” said Prabhat. “CrowdStrike has taken a lot of pain away. The improvement we’ve seen after deploying CrowdStrike Falcon is huge.” Although deploying CrowdStrike was not intended to save money, it has had a huge indirect impact. “The data GMG is responsible for protecting is highly personal and sensitive,” Prabhat said. “One data leak can create millions of dollars in loss of brand reputation, not to mention the actual cost of breach repair. CrowdStrike is designed to protect our customers, staff and the business, and that is what it has achieved. The value that delivers cannot be quantified.”