Case Study: Blackhawk Network reduces false positives and improves threat analysis with Anomali ThreatStream

Blackhawk Network - Customer Case Study

Blackhawk Network Holdings, a privately held company in prepaid debit cards, gift cards, and payments, faced a major threat intelligence challenge as its security team juggled multiple disconnected tools and dashboards. Before working with Anomali, the company had to manually correlate thousands of daily alerts, verify IOCs across different systems, and deal with duplicate or conflicting threat data that slowed investigations and overwhelmed analysts.

Anomali solved this by deploying Anomali ThreatStream, which consolidated threat feeds into a single dashboard, integrated directly with the SIEM, correlated alerts with threat scoring and confidence levels, and enabled sandbox detonation for suspicious files. With Anomali, Blackhawk Network Holdings improved response times, reduced manual overhead, increased analyst capacity without adding staff, and cut false positives by over 95%, helping the team focus on the threats that mattered most.

Blackhawk Network

Devin Ertel

Chief Information Security Officer