Interestingly, the nature of the available stolen data means the typical victim of an ATO attack varies slightly depending on whether a bank or a retailer is under attack.