From the Cybersecurity and Infrastructure Security Agency (CISA), Black Friday Shopping: Protect Your Identity:

“Black Friday is one of the most lucrative shopping days of the year for retailers in brick-and-mortar shops and online, but shoppers aren't the only ones looking for deals. Malicious people may be able to obtain personal information (such as credit card numbers, phone numbers, account numbers and addresses) by stealing your wallet, overhearing a phone conversation, rummaging through your trash (a practice known as dumpster diving) or picking up a receipt at a restaurant that has your account number on it. If a thief has enough information, he or she may be able to impersonate you to purchase items, open new accounts or apply for loans.
 

From CISA, Holiday Online Shopping:

“At CISA, we are committed to helping Americans better protect themselves online. This holiday shopping season, we’re here to provide a few easy steps to prevent you from becoming a victim of cyber-crime. 

“Using strong passwords, updating your software, thinking before you click on suspicious links and turning on multi-factor authentication are the basics of what we call 'cyber hygiene' and will drastically improve your online safety. 

“Here are the 4 common sense ways to protect yourself online:

• Implement multi-factor authentication (MFA) on your accounts and make it much less likely you’ll get hacked.
• Update your software. In fact, turn on automatic updates. 
• Think before you click. Most successful cyber-attacks start with a phishing email. 
• Use strong passwords, and ideally a password manager to generate and store unique passwords.”