NPR: Target Data Breach

[JourneyOfLife]

I first heard about it about a week before Christmas.

But saw no discussion about it. Thought I would put a link to this update from NPR about it.

Target's Word May Not Be Enough to Keep Your Stolen PINs Safe : NPR (http://www.npr.org/2013/12/29/258009006/targets-word-may-not-be-enough-to-keep-your-stolen-pins-safe)

[CFrance]

That's one reason why we never pay for anything with a debit card. We just use it to withdraw cash at the bank. Don't want someone to come along and clean out our checking account. We feel better protected by the cc companies than by the bank. Plus we get mileage on the cc.

[JourneyOfLife]

I wonder about the details.

More importantly, I would like to know what they had to do to secure their systems.

We shop there from time to time. If we purchase anything from them over the next year or so, we will use cash.

It may take a while before I feel confident about using my card to make purchases from them.

[KayakerNC]

It is time for the credit card issuers to increase security on the cards. The magnetic strips are a joke.

Target breach exposes lackluster credit card security - baltimoresun.com (http://www.baltimoresun.com/news/maryland/sun-investigates/bs-md-sun-investigates-target-20131227,0,67638.story)

[JourneyOfLife]

There seems to be a time schedule when they are supposed to move to Chip and PIN cards.

Headed To Europe? Why You Need A Chip And PIN Credit Card | Financial | Minyanville's Wall Street (http://www.minyanville.com/sectors/financial/articles/Chips-to-Improve-Credit-Card-Security/10/8/2013/id/52098)

Merchants in the US face an October 2015 deadline for moving to chip cards -- after that, the liability for fraudulent transactions on a mag card will shift to the stores

[JourneyOfLife]

It sounds like they are still trying to figure out, how bad it is, and what exactly happened.

The company said Friday that as part of its ongoing probe it found that some customer information, apart from the payment card data previously disclosed, was stolen during the data breach. It said this is not a new breach.

The stolen information includes names, mailing addresses, phone numbers or email addresses for up to 70 million individuals.

Target says stolen info in data breach almost doubles to 70 million (http://www.nbcnews.com/business/target-says-stolen-info-data-breach-hit-70-million-people-2D11894083)

[TrudyM]

It sounds like they are still trying to figure out, how bad it is, and what exactly happened.



Target says stolen info in data breach almost doubles to 70 million (http://www.nbcnews.com/business/target-says-stolen-info-data-breach-hit-70-million-people-2D11894083)

I have been watching my card online twice a day and so far so good no one has attempted to use it. I lowered my email alert limit to $50 so if someone (including me) uses it for over $50 I get an email.

[JourneyOfLife]

The total number of people affected seems to be in question.

Names, home and e-mail addresses for as many as 70 million people were taken, the Minneapolis-based company said Friday. That information is in addition to the credit- and debit-card data of 40 million accounts that Target previously said was stolen. Molly Snyder, a spokeswoman, said that while it is likely the two groups of victims overlap, Target doesn't yet know the extent, and it is possible they are distinct.

Target says breach may have hit up to 110 million shoppers (http://www.latimes.com/business/la-fiwtarget-hack-20140110,0,1254303.story)

[patfla06]

I didn't want to continue to watch and worry so I had Citi issue me a new credit card and B of A issue me a new debit card.

[villagetinker]

There was another data Breach, at Neiman Marcus.............Just announced this evening.

[Cisco Kid]

We just got new cards from the bank because of this.
I look over the statement.
It appears my wife did a lot more damage to my account than the hackers did.

[CFrance]

There's a MRS. Cisco??? :22yikes: The poor thing...

(JUST KIDDING!):wave:

[Cisco Kid]

There's a MRS. Cisco??? :22yikes: The poor thing...

(JUST KIDDING!):wave:

If I had a dollar for every time I heard that I would retire and move to
The Villages, even with the crime wave.

[JourneyOfLife]

I have seen a few customers interviewed on the news... some have the opinion; "Oh well, stuff happens".

If they become a fraud victim, I would like to see their follow-up interview! I'll bet they won't be so glib about it then.

[CFrance]

I wonder how one receives the year's worth of identity protection from Target. Do you have to have had your card compromised, or what if you shopped there during that period but have seen nothing on your card?

I wouldn't worry about the cc being compromised; that happens all the time and is covered by the cc companies. Having access to your email and possible identity theft, or a debit card to clean out your checking account is a totally different matter.

[KathieI]

There was another data Breach, at Neiman Marcus.............Just announced this evening.

Oh well, that's one breach I don't have to worry about, LOL.
http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net) http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net) http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net)

[CFrance]

Oh well, that's one breach I don't have to worry about, LOL.
http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net) http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net) http://www.millan.net/minimations/smileys/whoopdedoo.gif (http://www.millan.net)

Whot, you don't shop Needless Markup?:22yikes:

[rubicon]

Target is being sued for this breach. Boy that was surprised I bet a number of credit card holders will allege psychological damage at the thought their cards were compromised and that it has caused such a shift in their lives that they can no longer, eat, sleep or have sex ( yes not having sex is a legitmate claim. Its called consortium ( sex, services, society from a spouse)

what a country!

If the banks get sued for utilizing antiquated methods for protecting their customers then, I guess it might move up the chip/pin utilization

[JourneyOfLife]

Target is being sued for this breach. Boy that was surprised I bet a number of credit card holders will allege psychological damage at the thought their cards were compromised and that it has caused such a shift in their lives that they can no longer, eat, sleep or have sex ( yes not having sex is a legitmate claim. Its called consortium ( sex, services, society from a spouse)

what a country!

If the banks get sued for utilizing antiquated methods for protecting their customers then, I guess it might move up the chip/pin utilization

The financial institutions were not the cause of the delay.... At least, that is not what I have been reading.

Many businesses that accept credit and debit cards did not want to spend the money to upgrade their card technology.

The big shift will happen in 2015, that is when the banks said to retailers; After that, if a retailer has fraud from accepting mag strip cards, they pay!

Preparing for the Shift in Credit Card Liability in 2015 (http://www.mrketplace.com/57196/preparing-for-the-shift-in-credit-card-liability-in-2015/)


A comment about companies storing data. It is considered a best practice now days to encrypt certain types of data that is stored on disk (databases, backups, etc). Essentially any data that has any sort of privacy, financial, etc, type implication. However, many companies have not been willing to spend the money to retrofit their systems to encrypt that data.

It will be interesting to read the details of this case as they emerge... what little details are provided will be in information technology periodicals.

[JourneyOfLife]

Ugh :swear:

Quote from Forbes Article:

So, what gives? I called Target to ask.

“The email that guests have received in the past week was to inform them of the second announcement related to partial personal data that had been obtained by Target through the normal course of our business, but not necessarily just during the November 27 – December 15 time frame,” a Target spokesperson said.

Meaning my personal data from that bath towel purchase in 2004 was stolen during this breach?

“I don’t have the specific time frame, but yes, that is the idea,” the press officer told me.


Surprise! Target Data Breach Could Include Your Info From Purchases Made A Decade Ago (http://www.forbes.com/sites/clareoconnor/2014/01/16/surprise-target-data-breach-could-include-your-info-from-purchases-made-a-decade-ago/)

[JourneyOfLife]

An update on the Target data Breach.


There is a lot more to this story. We will hear about it soon.


AP:

A western Pennsylvania heating and refrigeration contractor said it was the victim of a "sophisticated cyber attack operation" that is being investigated by the Secret Service and possibly linked to the data breach that enabled hackers to access millions of credit card numbers belonging to Target store customers.

Fazio Mechanical Services Inc., of Sharpsburg, issued the statement after Internet security bloggers identified it as the third-party vendor through which hackers accessed Target's customer information. Target had previously told reporters the store believed hackers accessed 40 million of its customers' card numbers through a vendor's system.

U.S. Secret Service spokesman Brian Leary has confirmed an investigation into Fazio's business, but wouldn't provide details.

Pa. Vendor Confirms Link to Target Data Probe (http://abcnews.go.com/US/wireStory/pa-vendor-confirms-link-target-data-probe-22406642?.tsrc=tmobustoday)