Security Breach Challenging Customers Protection

A direct cyberattack in 2014 to JPMorgan Chase caused a compromised of accounts effecting a total of 76 million households and seven million small businesses. We are clearly, in times when consumer confidence in the digital operations of corporate America is on shaky ground. In directly, banking is taking the brunt of the fallout but major stores also have breaches which of course are directly related to their financial data. Store like, Target, Home Depot and a number of other retailers have experienced major data breaches. 40 million cardholders and 70 million others were compromised at Target alone in 2013 and an attack at Home Depot in September, 2013 affected 56 million cardholders.

In December of 2013, target corporation faced a serious security breach where over 40 million credit cards were stolen from different target stores. This paper is going to explore the problem, the background information about the problem, the controls that could have been in place to prevent the issue, the intended plan of control and the associated risks involved.

The Security breach that hit Target in 2014 was one of the worst ever. It exposed names, addresses, phone numbers, credit and debit cards information’s of 70 million customers. Target informed that all transactions and customers’ information between Nov.27 to Dec. 15 2014 were stolen on the attack by hackers. This attack affect millions and the giant store as well losing money when their sales declined to 2.5 percent. Target had to email all affected customers and help all of them with their own credit monitoring by offering free credit monitoring and identity theft protection and also make them no liable to any fraudulent purchase after the breach. It was a big deal and it was all over the news. Two suggestions I would give is one, add a protocol

This paper explores seven references that report the results from research conducted on-line regarding the 2013 Target breach. According to the website “Timeline of Target 's Data Breach And Aftermath: How Cybertheft Snowballed For The Giant Retailer” (2015), the breach occurred November and December 2013 in which customers who shopped at Target locations credit and debit cards were breached and their personal information was exposed. Upon their investigation, it was determined their point of sale system was hacked. “Wikipedia” states point of sale system which is used by third party vendors has cash registers as well as barcodes which stores customer’s information. The website “What is Packet Sniffer” (2016), Packet Sniffing may have been a way the attacked happened. “RAM Scraping Attack” website indicates what RAM means and how this type of attack happens. “What is a Firewall in Networking and How They Protect Your Computers” (2014), “What is Endpoint Security? Data Protection 101” and “Why SSL? The Purpose of using SSL Certificates” websites each provide ways to reduce and/or prevent future attacks.

In December 2013, the CEO, Gregg Steinhafle, of Target announced that their company was affected by a data breach that occurred between November 27 and December 15, 2013. “Target disclosed that online thieves hacked into its computer system, stealing credit card or personal information from more than 100 million customers. Both personal data and credit card information may have been stolen from about 12 million people” (Abrams, 2014). The outcome of this breach has cost Gregg Steinhafle his job, as well as the trust of Target’s consumers, investors, and close to $150 million in breach-related costs. This breach is considered one of the largest retail data breaches in U.S. history due to the amount of personal data and credit card

On Dec 19, 2013 Target Corporation announced to the world that they had suffered a major data security breach. Due to Target Corporations poor stance on network security, hackers were able to steal over 40 million payment card records, encrypted PINs and 70 million customer records during the Black Friday sales week. Initial reports indicated that it was malware placed on their Point of Sales (POS) system, but that was just the tip of the iceberg of the breach. If there had been better security from the start this breach could have been avoided or greatly reduced.

Michael’s Store, Inc. is an arts & crafts Retail chain. It has more than 1040 stores located in 49 US states & Canada. The company also owns and operates the Aaron brother’s retail chain, which happens to have an additional 115 stores across the Country. Michael’s store Inc. had a Security breach, which took place between May 8, 2013 and January 27, 2014. About 2.6 million cards or about 7 percent of payment cards used at its stores during the period were affected. Alarmingly, its subsidiary Aaron brothers also had been breached between June 26, 2013 and February 27, 2014. It was reported that Aaron brothers had 400,000 cards impacted. The duration of the treacherous attack in total was 8 months (Schwartz, 2014). In this report, security breach of Michael’s store Inc. is analyzed. The topics covered are how the breach occurred, what did the authorities do to educate the customers & how in future such attacks can be avoided.

In the Data breach Investigation report of 2012, the compromised records 174 million security incidents from all over the world were analyzed also the investigation confirmed 855 data breaches. The attacks were carried out from 19 different nations and affected all kinds of organizations small and large.

Aside from the Playstation Outage, there had been larger and more nefarious data breaches in history that exploited weaknesses in internet, server, and network security. One such breach is when Heartland Payment Systems had, what was called, the most massive credit card security breach in history, with hackers embedding deep into Heartland security and recording card data. According to Bloomberg Business, it was estimated that “as many as 100 million cards issued by more than 650 financial services companies may have been compromised”. The attack cost Heartland $12.6 million, which was orchestrated by a man named Albert Gonzalez, who was also the cause for several other data breaches, each costing from thousands to millions of dollars. Another such attack was when Russian, and a Ukrainian, computer hackers assaulted NASDAQ stock exchange servers and stealing “more than 160 million credit and debit card numbers, target more than 800,000 bank accounts” (NY Daily News). Separate hacking operation spanned over seven years, attacking NASDAQ, but also affected “chains like 7-Eleven”. All the operations, in the period of time and the global scale it spanned, resulted “in at least $300 million in losses to companies and individuals”. One of the latest, and possibly the largest, data breaches of 2015, Anthem, the second largest health insurer in the US was hacked, compromising millions of account and personal data, as well as social security. When Anthem discovered that they had been

The major retailer Target had an online security breach in 2013, which resulted in a loss on $3.2 million dollars in a single day. Almost 4 million credit card and debit card information were compromised Hackers infiltrated(DdoS) the servers of the online store during peak shopping time and implemented several bots to mislead customers to put their credit card information into a wrong location. Within hours all the information was recorded and this led to the biggest credit card fraudulence in recent times. What to take away from this incident? Not even the major corporations are safe from cyber attacks and lack better cyber security. Retailers’ revenue lost to online fraud increased over the past two years to reach an estimated $3.5 billion, an up of 3% from $3.4 billion in 2011(Cybersource 2013). A pie chart below demonstrates the distributions of the targets due in cyber

(April 2015) today our financial and personal information is everywhere. It is in our phones for mobile payments, in our wallets on our credit cards and in the data centers and clouds of the companies and third parties that complete transactions on our behalf. With so much personal information—quite literally—floating around various access points, it has never been more lucrative or easy for cyber-criminals to access and mine private information to sell on the black market.The Target data breach at the end of 2013, which affected the card payment information of more than 40 million shoppers and the personal data of almost 70 million consumers, kick-started a continuous barrage of point-of-sale (POS) attacks affecting consumers, businesses and banks throughout 2014. Between the breaches at Dairy Queen, Home Depot and Neiman Marcus, it seemed like cyber-criminals were always one step ahead of the game, using malware and card-skimming techniques to gain access to confidential

Target Corporation acknowledged a breach in their systems just as the 2013 holiday season was in full swing. The hacker have taken the information of nearly 40 million credit and debit cards from shoppers who shopped in its stores over the initial three weeks of the holiday season. This is the second biggest penetration of its kind announced by a United States retailer, of which Target is the third largest retailer. Apparently, the hackers worked quite speedily with the operation lasting from the day before Thanksgiving to Sunday December 15, 2013. These nineteen days are part of the large kickoff to the Christmas sales season. Target is said to be working with federal law enforcement and other experts to avert comparable future attacks. The company has not and does not seem to have an intention of revealing exactly how the system was compromised. It is known, however, that the company did not find the attack alone.

In December 2013, Target was attacked by a cyber-attack due to a data breach. Target is a widely known retailer that has millions of consumers flocking every day to the retailer to partake in the stores wonders. The Target Data Breach is now known as the largest data breach/attack surpassing the TJX data breach in 2007. “The second-biggest attack struck TJX Companies, the parent company of TJMaxx and Marshall’s, which said in 2007 that about 45 million credit cards and debit cards had been compromised.” (Timberg, Yang, & Tsukayama, 2013) The data breach occurred to Target was a strong swift kick to the guts to not only the retailer/corporation, but to employees and consumers. The December 2013 data breach, exposed Target in a way that many

A data breach, one of the threat exists allows the information and data to go out from the banking system, making it viewable to others. Some of the examples of potential hazards and which remain the main motives of the electronic banking system are during on-line transactions, transferring funds, and minting electric currency, etc.

The biggest risk of data theft lies within a company 's customers. When security breaches happen, the customer begins to question if Sunoco has looked out for their personal information and overall trust becomes an issue. Whenever someone purchases with a credit card, the customer is putting their trust in Sunoco that the information will not fall into the wrong hands. If Sunoco does not handle the situation quickly and efficiently after it occurrs, panic ensues by current and potential customers. Credit cards are a huge portion of sales today. According to Javelin Strategy & Research, “plastic cards purchases comprised 66 percent of all in-person sales, with nearly half of them, or 31 percent, made with debit cards. Last year shoppers used credit cards for 29 percent of point-of-sale purchases; it is expected that the numbers will rise to 33 percent by 2017” (New, 2012, para. 5). That leaves potential for a significant loss in sales and annual earnings. With the increase of credit and debt card usage, Sunoco needs to take the necessary action to ensure that data theft does not occur again for their customers.