What Is Target's Phishing Attack

During the last Christmas season, Target announced that their data security was breached. According to David Lazarus in Los Angeles Times, Target stated that roughly 110 million customers’ information was illegally taken from their database. The information included their credit/debit card info, phone numbers, and email addresses. Target is one of the most popular grocery stores in the U.S.; they have a substantial amount of consumers. Because of this incident, consumers' trusts for the store have been decreasing. Worrying about losing its customers, the company offered a free year of credit monitoring and identity-theft protection, so the customers will feel more secure. Not only Target, some other large retailers also faced the same issues. They want their customers to trust that the companies can protect private data. However, should we not worry? Data breaches have been going on for about a decade, but we have not seriously thought about the issue. In order to protect people’s privacy, the federal government should make new laws concerning companies’ handling of customer information.

On December 18, 2013, one of the security bloggers, Brian Krebs, posted in his blog that Target, one of the biggest US retailers, had suffered a massive data breach. The next day, Target announced that data from more than 40 million credit and debit card accounts had been stolen from its systems, and noting that they started a thorough investigation. Perhaps learning from Target’s mistakes, other organizations could achieve a goal of better protecting themselves and their customers’ information.

This paper explores seven references that report the results from research conducted on-line regarding the 2013 Target breach. According to the website “Timeline of Target 's Data Breach And Aftermath: How Cybertheft Snowballed For The Giant Retailer” (2015), the breach occurred November and December 2013 in which customers who shopped at Target locations credit and debit cards were breached and their personal information was exposed. Upon their investigation, it was determined their point of sale system was hacked. “Wikipedia” states point of sale system which is used by third party vendors has cash registers as well as barcodes which stores customer’s information. The website “What is Packet Sniffer” (2016), Packet Sniffing may have been a way the attacked happened. “RAM Scraping Attack” website indicates what RAM means and how this type of attack happens. “What is a Firewall in Networking and How They Protect Your Computers” (2014), “What is Endpoint Security? Data Protection 101” and “Why SSL? The Purpose of using SSL Certificates” websites each provide ways to reduce and/or prevent future attacks.

As value customers of the Anthem, Inc. we believe it is important to keep each one of you informed of any incident that might affect your business with us. Your privacy and security is our priority for the reason Anthem, Inc. would like to inform our customers of a recent phishing attack. Unfortunately, we have experienced similar attacks in the past which led many of the employees and customers’ data exposed to hackers. Even though this is a serious matter for the company and the customers it is important for us to make our customers aware that phishing attacks are common and they cause huge losses to both the customers and the companies (Wright et al., 2014). Our most recent attack took place on April 2014 and it affected about 80 million identifiable data stolen via phishing emails. The

The Home Depot and Target have been one of the many retail establishments cyber attack breaches that have being targeted by cyber attackers. The Home Depot was the target of a cyberattack payment card system breach where their credit card information was basically stolen on September of 2014. The attacked occurred by attackers gaining third party credentials in order to gain access to the system, after they gained access to the system they weakened the system gaining their own access privileges. After doing all the mentioned above, malware was installed quickly on Home Depot’s self-check-out system. All these steps where taking by the cyber attackers resulting in the loss of more than fifty million credit card accounts and email addresses.

The attack on Home Depot in 2014 happened from hackers that retrieved stolen vendor login credentials which allowed access to home depot’s system. the hackers then install malware on home depot’s payment system, which helped the hackers steal the credit

In the middle of the holiday season, Target shoppers were knocked off their feet with the news that in December 2013 that 40 million Target credit card numbers had been stolen (Krebs, 2013f) by someone accessing Target’s data on their point of sale (POS) systems (Krebs, 2014b). To make matters worst Target later revised their number to include the private data for 70 million of their customers (Target, 2014). The breach took place period of November 27 through December 15th 2013 (Clark, 2014). Target had gotten taken for over 11 GB of their data that had been stolen (Poulin, 2014). Target did not catch their internal alerts and was informed about the breach when they were contacted by the Department of Justice (Riley, Elgin,

Aside from the Playstation Outage, there had been larger and more nefarious data breaches in history that exploited weaknesses in internet, server, and network security. One such breach is when Heartland Payment Systems had, what was called, the most massive credit card security breach in history, with hackers embedding deep into Heartland security and recording card data. According to Bloomberg Business, it was estimated that “as many as 100 million cards issued by more than 650 financial services companies may have been compromised”. The attack cost Heartland $12.6 million, which was orchestrated by a man named Albert Gonzalez, who was also the cause for several other data breaches, each costing from thousands to millions of dollars. Another such attack was when Russian, and a Ukrainian, computer hackers assaulted NASDAQ stock exchange servers and stealing “more than 160 million credit and debit card numbers, target more than 800,000 bank accounts” (NY Daily News). Separate hacking operation spanned over seven years, attacking NASDAQ, but also affected “chains like 7-Eleven”. All the operations, in the period of time and the global scale it spanned, resulted “in at least $300 million in losses to companies and individuals”. One of the latest, and possibly the largest, data breaches of 2015, Anthem, the second largest health insurer in the US was hacked, compromising millions of account and personal data, as well as social security. When Anthem discovered that they had been

The major retailer Target had an online security breach in 2013, which resulted in a loss on $3.2 million dollars in a single day. Almost 4 million credit card and debit card information were compromised Hackers infiltrated(DdoS) the servers of the online store during peak shopping time and implemented several bots to mislead customers to put their credit card information into a wrong location. Within hours all the information was recorded and this led to the biggest credit card fraudulence in recent times. What to take away from this incident? Not even the major corporations are safe from cyber attacks and lack better cyber security. Retailers’ revenue lost to online fraud increased over the past two years to reach an estimated $3.5 billion, an up of 3% from $3.4 billion in 2011(Cybersource 2013). A pie chart below demonstrates the distributions of the targets due in cyber

(April 2015) today our financial and personal information is everywhere. It is in our phones for mobile payments, in our wallets on our credit cards and in the data centers and clouds of the companies and third parties that complete transactions on our behalf. With so much personal information—quite literally—floating around various access points, it has never been more lucrative or easy for cyber-criminals to access and mine private information to sell on the black market.The Target data breach at the end of 2013, which affected the card payment information of more than 40 million shoppers and the personal data of almost 70 million consumers, kick-started a continuous barrage of point-of-sale (POS) attacks affecting consumers, businesses and banks throughout 2014. Between the breaches at Dairy Queen, Home Depot and Neiman Marcus, it seemed like cyber-criminals were always one step ahead of the game, using malware and card-skimming techniques to gain access to confidential

In December 2013, Target announced that massive amounts of credit and debit card information they collected over the years might be in the danger of theft. The credit card breach could affect as many as 70 million customers who swept cards in the retail stores or linked their cards with the membership card, the RedCard. Each card information contains a card number, holder’s name, address, phone number and etc. The more information the thieves got, the more conveniently the thieves could use them to get benefits from the card holders. Jia Lynn Yang and Amrita Jayakumar, the authors of “Target says up to 70 million more customers were hit by December data breach”, write about how bad people will use customers’ information to crime. These thieves possibly shop online by inserting the card information. They could also contact with the victims to gather more sensitive information, and even hack into their computers. This event forces us to seriously consider the crisis in how retails protect customers’ data (Yang &

Bank of America is a multinational banking institute and one of the most trusted in the banking industry. This organizations sole purpose is to protect the customer’s confidentiality and assets by ensuring that data protection is the number one priority; however any organization when holding personal information can be a victim of data breach and BoA is not exempt. One of the largest risks BoA faces today is Mobile Banking. This consumer convenience is used by fifty percent of smart phone owners (Finney, 2014). Phishing is also threat to the banking industry; this strategy by hackers allows the extraction of consumer passwords and other sensitive information. Hackers targeting banking institution employees with convincing e-mails that fool them into clicking on malicious links-which ultimately compromise their credentials or

Largo Books’ customers fell victim to a phishing scheme or attack. Phishers are entities who take personal information by sending spam or through other dishonest methods for some financial gain (ICS-CERT, n.d.). A phishing scheme or attack would be the methods used to obtain that personal information. For example, there have been incidences of Bank of America customers receiving emails stating that they were receiving a Bank of America alert and that their on-line [sic] banking was bloked [sic]. The email included a logo which, at first glance, appeared to be the trusted Bank of America logo. However, the email contained misspellings requesting the customers click a link. The customer would click the link without noticing the URL was,

The increasing volume and sophistication of cyber security threats including targeted data theft, phishing scams and other online vulnerabilities demand that we remain vigilant about securing our systems and information.

Phishing can be compared with fishing in a lake, instead of trying to capture fish, phishers goal is to steal your personal information. Phishing being one of the easiest forms of cyber-attack for a criminal to carry out which can provide crucial information of the an individual and the information can be anything like passwords, account numbers, credit card details etc.