Tornado Alley (PROG)

[fuagf]

Target suffers Black Friday hack at 'nearly all'
stores, millions of credit cards at risk (update)

One of America's biggest retailers may have fallen to hackers

By Chris Welch on December 18, 2013 05:07 pm Email 81Comments

[ sorry, can't copy image ]

Retailers are an appealing target for hackers during the holidays, and Target may be learning that lesson the hard way. According to Krebs on Security .. http://krebsonsecurity.com/2013/12/sources-target-investigating-data-breach/ , the US retail giant is investigating a major breach that could potentially involve "millions" of customer credit and debit card records. The sophisticated hack reportedly took place over several weeks — starting on Black Friday and possibly extending all the way through December 15th — and is said to involve "nearly all" Target stores in the United States.

Krebs says the breach "involves the theft of data stored on the magnetic stripe of cards used at the stores." Online orders are said to be unaffected. Still, it sounds like a worst case scenario for Target and its shoppers, with Krebs writing:

-----
The type of data stolen — also known as "track data" — allows crooks to create counterfeit cards by encoding the information onto any card with a magnetic stripe. If the thieves also were able to intercept PIN data for debit transactions, they would theoretically be able to reproduce stolen debit cards and use them to withdraw cash from ATMs.
-----

Thus far Target has offered no comment on the rumored breach, nor any direct confirmation of a hack. An anti-fraud analyst at a "top-ten US bank card issuer" made the situation sound dire, telling Krebs, "We can’t say for sure that all stores were impacted, but we do see customers all over the U.S. that were victimized." We have reached out to the company for more details.

Update: The Wall Street Journal is now independently reporting the breach .. http://online.wsj.com/news/articles/SB10001424052702304773104579266743230242538 , with details that match Krebs' initial story.

Update 2: A spokesperson for the US Secret Service has confirmed to the Associated Press .. http://abclocal.go.com/wls/story?section=news/consumer&id=9365630 .. that it is in fact investigating the incident.

Source Krebs on Security

http://www.theverge.com/2013/12/18/5225252/target-reportedly-hacked-black-friday-millions-of-credit-cards-at-risk