facebook
twitter
rss
account
search
search
 

Target data breach put down to access details stolen from contractor

Feb. 6, 2014 at 6:45 PM   |   Comments

| License Photo
WASHINGTON, Feb. 6 (UPI) -- Failure to properly segregate systems handling payment card data in its network led to the massive data breach at Target last month, a U.S. researcher says.

Hackers who broke into the retailer's network did so by using login credentials stolen from a heating, ventilation and air conditioning company that does work for Target at a number of locations, security blogger Brian Krebs reported Wednesday.

Krebs, who first reported the Target breach, said sources close to the investigation told him the attackers first gained access to Target's network on Nov. 15, with a user name and password stolen from Fazio Mechanical Services, a Sharpsburg, Pa., company that specializes in providing refrigeration and HVAC systems for large companies like Target.

Target had apparently granted Fazio access rights to its network so it could remotely monitor energy consumption and temperatures at various stores.

Hackers used that access to upload malware programs on the company's point of sale systems, investigators said.

From Nov. 27 to Dec. 15 the attackers used the malware to steal data on millions debit and credit cards. Initial reports indicated 40 million customers were affected; Target later increased the number to 100 million.

Fazio President Ross Fazio confirmed U.S. Secret Service investigators had visited his company regarding the Target breach but offered no other details on its alleged role in the breach, ComputerWorld reported.

Fazio did not immediately respond to a request for comment, ComputerWorld said.

© 2014 United Press International, Inc. All Rights Reserved. Any reproduction, republication, redistribution and/or modification of any UPI content is expressly prohibited without UPI's prior written consent.
Most Popular
1
Massive sunspot sending violent flares toward Earth Massive sunspot sending violent flares toward Earth
2
Google exec breaks skydive record with dive from near-space Google exec breaks skydive record with dive from near-space
3
Powerful new microscope sees cell division in real time Powerful new microscope sees cell division in real time
4
Stone tools reveal Ice Age settlement in the Andes Stone tools reveal Ice Age settlement in the Andes
5
Coal-rich Poland wants concessions in EU climate deal Coal-rich Poland wants concessions in EU climate deal
Trending News
Around the Web
x
Feedback