VIEW FROM THE BRIDGE Global Crime Intelligence & Observations

VIEW FROM THE BRIDGE

Global Crime Intelligence & Observations from Jurie Botha – Xpanda Managing Director

“Frequently, you will hear a non-risk professional confidently proclaim the same excuse – this was a one-off.

As all risk professionals painfully know, nothing in this edition was a one-off.

In the last two months we have watched thieves strip Tesla’s Nevada Gigafactory of trailer-loads of batteries, two young hackers sentenced in Britain’s biggest-ever cybercrime prosecution for an attack traced back to the same network that hit M&S, Co-op and Harrods, and, closer to home, a shopping centre in Limpopo SA where a community caught a gang allegedly jamming store security tags with handheld devices.

Different continents. Same criminal economics.

What strikes me most is how young these networks now are. Teenagers sentenced for a £29 million cyberattack. A 17-year-old banned from the pharmacy aisle after two years of systematic theft. Crime is no longer the preserve of hardened career criminals, it is becoming a career choice, taught, shared and monetised online as readily as any legitimate trade.

That should worry every risk professional reading this. The skills gap between opportunist and organised has closed. The tools; jamming devices, phishing kits, forged logistics paperwork, are cheap, available and effective.

The businesses that come through the changing risk landscape well are those that treat every one of these stories as a warning about their own operation, not someone else’s headline.”

CARGO CRIME – THE BATTERY HEIST EPIDEMIC

Cargo theft is now one of the fastest-growing criminal economies on the planet and Tesla has become its highest-profile victim.

Since December, thieves have stolen trailer-loads of Tesla batteries from the company’s Nevada Gigafactory at least 11 times, using forged driver’s licences to pose as legitimate carriers.
One haul, two trailers of Powerwall home batteries, was worth close to $1 million.
Investigators have called it “an epidemic.”

• US cargo theft losses surged 60% in 2025, to an estimated $725 million
• Average stolen shipment value climbed 36%, to almost $274,000
• “Deceptive pickup” scams, where criminals pose as carriers to intercept freight at the dock, rose 31%
• Electronics, food and drink, and auto parts remain the most targeted categories

Modern cargo theft blends the physical and the digital – cloned identities, forged paperwork, fake carriers and hacked load boards.

Supply chain crime is no longer random. It is strategic.

UK COURTS – THE PROLIFIC OFFENDER FILE

British courts have been busy.

A 17-year-old was spared jail in May after admitting stealing £137,342 of cosmetics and haircare from Boots branches across London over 20 months, plus a further haul from Holland & Barrett. He was banned from both retailers for a year and ordered to pay compensation.

Michael Belgrave, 55, was jailed for nine months in June after admitting 43 shoplifting offences at Ealing Magistrates’ Court.

He was one of a wave: prolific offenders were also jailed in Exeter, Norwich, Kent and Leeds through June and July, several banned from town centres for years after release.

Retailers have long argued that a small number of repeat offenders drive a disproportionate share of losses. This summer’s sentencing pattern suggests the courts are starting to agree.

CYBER CONVICTIONS – SCATTERED SPIDER FACES JUSTICE

On 16 July, two members of the hacking collective known as Scattered Spider were sentenced at Woolwich Crown Court to five and a half years each for a cyberattack on Transport for London that cost £29 million — the largest cybercrime prosecution ever brought before a UK court.

Thalha Jubair, 20, and Owen Flowers, 18, are linked to the same network arrested last year over the ransomware wave that crippled M&S, forced Co-op to pull its systems offline, and hit Harrods.

The group’s reach is global. Separately, Tyler Buchanan, 24, from Dundee, has pleaded guilty in a US federal court to a phishing scheme that stole $8 million from American companies, and faces up to 22 years when he is sentenced in August.

Retail’s cyber threat and its physical theft problem are increasingly the same criminal ecosystem, worked by the same young, technically fluent networks.

FROM THE XPANDA HEARTLAND – SOUTH AFRICA

This edition’s headline story already involved batteries — the rest of the world’s criminals have not been idle either:

• Olive oil hijackings across Spain and Italy, as UK prices rise 118% and retailers such as Tesco now security-tag bottles
• One US gang stealing $100,000 of energy drinks one day, then $3 million of televisions the next
• A single ring moving a $10 million haul spanning meat, fish, eggs, skincare products and cryptocurrency mining machines
• Teenagers arriving at a Los Angeles convenience store by bicycle to kick in the door and stream the raid live.

Criminal ambition, it turns out, has no category limit.

CRIME TREND TO WATCH – INTELLIGENCE-LED RETAILING

Retailers globally are moving beyond CCTV toward forensic marking, AI-driven behavioural analytics and shared intelligence platforms.

The next generation of retail protection will combine:

• physical deterrence and AI surveillance
• behavioural detection and forensic traceability
• cross-retailer intelligence sharing and predictive risk analytics

The strongest retailers of the next decade will not be the most technologically advanced as well as those revisiting the core principles of crime risk management.

They will be the hardest environments for organised criminals to exploit – consistently, everywhere.

FINAL THOUGHT

From a Gigafactory forecourt in Nevada, to a shopping centre car park in Limpopo, to a Crown Court in Woolwich, the geography changes, the pattern does not.

Organised criminals are professional, mobile and increasingly indifferent to the line between physical and digital crime.

Policing is starting to respond in kind, but retailers who wait for enforcement to catch up will keep paying the gap.

The businesses that thrive over the next decade will not simply respond fastest after incidents.

They will become the most difficult targets in the first place.

Selected Industry Sources & Intelligence

• London Now / GB News – Boots & Holland and Barrett shoplifting sentencing, May 2026
• Ealing Magistrates’ Court reporting – Michael Belgrave sentencing, June 2026
• National Crime Agency & Woolwich Crown Court – Scattered Spider / TfL sentencing, July 2026
• ITV News – Tyler Buchanan US cyber fraud case, 2026
• TimesLIVE – Limpopo and KwaZulu-Natal retail theft syndicate arrests, June 2026
• Electrek / Nevada law enforcement reporting – Tesla Gigafactory battery thefts
• Retail Gazette – London Retail Crime Action Plan, July 2026
• Europol & INTERPOL Joint Key Operational Priorities 2026
• CargoNet & ITF Group Cargo Theft Reporting 2026

Xpanda Real Security
www.xpandauk.co.uk
www.xpanda.co.za
www.xpandasecuritygates.com