A Brief Summary Of The Home Depot Attack

The Home Depot and Target have been one of the many retail establishments cyber attack breaches that have being targeted by cyber attackers. The Home Depot was the target of a cyberattack payment card system breach where their credit card information was basically stolen on September of 2014. The attacked occurred by attackers gaining third party credentials in order to gain access to the system, after they gained access to the system they weakened the system gaining their own access privileges. After doing all the mentioned above, malware was installed quickly on Home Depot’s self-check-out system. All these steps where taking by the cyber attackers resulting in the loss of more than fifty million credit card accounts and email addresses.

On Dec 19, 2013 Target Corporation announced to the world that they had suffered a major data security breach. Due to Target Corporations poor stance on network security, hackers were able to steal over 40 million payment card records, encrypted PINs and 70 million customer records during the Black Friday sales week. Initial reports indicated that it was malware placed on their Point of Sales (POS) system, but that was just the tip of the iceberg of the breach. If there had been better security from the start this breach could have been avoided or greatly reduced.

Once on Target’s network with elevated privileges the attackers were able to launch malware to the POS systems that would capture the credit card information of the consumers as they swiped their cards to pay for their items. They launched a second piece of malware that that would take the captured information and move it to a dump server on the internal network. Once the information was on the dump server it them

This paper will present a report that will assist with determining the controls required to implement to ensure that data are secure for the Northcentral University. This paper will summarize the security breaches of the Target Store Corporation over the previous year and make recommendations in the form of information technology security best practices to strengthen the University’s infrastructure.

In December 2013, Target was attacked by a cyber-attack due to a data breach. Target is a widely known retailer that has millions of consumers flocking every day to the retailer to partake in the stores wonders. The Target Data Breach is now known as the largest data breach/attack surpassing the TJX data breach in 2007. “The second-biggest attack struck TJX Companies, the parent company of TJMaxx and Marshall’s, which said in 2007 that about 45 million credit cards and debit cards had been compromised.” (Timberg, Yang, & Tsukayama, 2013) The data breach occurred to Target was a strong swift kick to the guts to not only the retailer/corporation, but to employees and consumers. The December 2013 data breach, exposed Target in a way that many

The Home Depot, the home improvement, construction products and services retailer got hit by hackers by compromising the millions of customer’s data. The data of credit cards and debit cards have been stolen by the hackers.

The major retailer Target had an online security breach in 2013, which resulted in a loss on $3.2 million dollars in a single day. Almost 4 million credit card and debit card information were compromised Hackers infiltrated(DdoS) the servers of the online store during peak shopping time and implemented several bots to mislead customers to put their credit card information into a wrong location. Within hours all the information was recorded and this led to the biggest credit card fraudulence in recent times. What to take away from this incident? Not even the major corporations are safe from cyber attacks and lack better cyber security. Retailers’ revenue lost to online fraud increased over the past two years to reach an estimated $3.5 billion, an up of 3% from $3.4 billion in 2011(Cybersource 2013). A pie chart below demonstrates the distributions of the targets due in cyber

A direct cyberattack in 2014 to JPMorgan Chase caused a compromised of accounts effecting a total of 76 million households and seven million small businesses. We are clearly, in times when consumer confidence in the digital operations of corporate America is on shaky ground. In directly, banking is taking the brunt of the fallout but major stores also have breaches which of course are directly related to their financial data. Store like, Target, Home Depot and a number of other retailers have experienced major data breaches. 40 million cardholders and 70 million others were compromised at Target alone in 2013 and an attack at Home Depot in September, 2013 affected 56 million cardholders.

From November 27 to December 15, 2013 Target Corporation released 70 million customers’ personal information. On average, it takes companies 200 days to uncover they are being hacked (Lunden, 2015). It only took Target 12 days to figure out the crisis that began happening. On December 19, Target originally said only 40 million credit and debit card accounts may have been compromised during Black Friday weekend to December 15. “The information stolen included customer names, credit or debit card number, and the card’s expiration date and CVV” (McGrath, 2014). Although Target never clarified how they were hacked, security experts say that hackers targeted their POS system. “Target spent $61 million through Feb. 1 responding to the breach, according

An unauthorized and highly sophisticated malware that not been encountered previously by any security company attacked the point-of-sale systems where all the card information is stored. The outcome of this hacking been extensive and affected millions of customer’s personal and payment data was exposed, results in the payment card compromise of three million customers.

The Security breach that hit Target in 2014 was one of the worst ever. It exposed names, addresses, phone numbers, credit and debit cards information’s of 70 million customers. Target informed that all transactions and customers’ information between Nov.27 to Dec. 15 2014 were stolen on the attack by hackers. This attack affect millions and the giant store as well losing money when their sales declined to 2.5 percent. Target had to email all affected customers and help all of them with their own credit monitoring by offering free credit monitoring and identity theft protection and also make them no liable to any fraudulent purchase after the breach. It was a big deal and it was all over the news. Two suggestions I would give is one, add a protocol

Michael’s Store, Inc. is an arts & crafts Retail chain. It has more than 1040 stores located in 49 US states & Canada. The company also owns and operates the Aaron brother’s retail chain, which happens to have an additional 115 stores across the Country. Michael’s store Inc. had a Security breach, which took place between May 8, 2013 and January 27, 2014. About 2.6 million cards or about 7 percent of payment cards used at its stores during the period were affected. Alarmingly, its subsidiary Aaron brothers also had been breached between June 26, 2013 and February 27, 2014. It was reported that Aaron brothers had 400,000 cards impacted. The duration of the treacherous attack in total was 8 months (Schwartz, 2014). In this report, security breach of Michael’s store Inc. is analyzed. The topics covered are how the breach occurred, what did the authorities do to educate the customers & how in future such attacks can be avoided.

In December 2013, the CEO, Gregg Steinhafle, of Target announced that their company was affected by a data breach that occurred between November 27 and December 15, 2013. “Target disclosed that online thieves hacked into its computer system, stealing credit card or personal information from more than 100 million customers. Both personal data and credit card information may have been stolen from about 12 million people” (Abrams, 2014). The outcome of this breach has cost Gregg Steinhafle his job, as well as the trust of Target’s consumers, investors, and close to $150 million in breach-related costs. This breach is considered one of the largest retail data breaches in U.S. history due to the amount of personal data and credit card

The second security breach case is of Barnes & Noble. In September 2012, hackers stole credit card information of customers who shopped at sixty-three Barnes & Noble stores across the United States, which included New York City, San Diego, Miami and Chicago. The company discovered customer information had been stolen but kept the incident quiet per the request of the Justice Department so the F.B.I. could find out who was behind the intrusion (Huffington Post, 2012).