Thursday, November 27, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Middle Green Valley plan moves forward

By Amy Maginnis-Honey | From Page: A1, 6 Comments

 
Veterans ready to serve Thanksgiving dinner

By Ian Thompson | From Page: A1 | Gallery

 
New focus on achievement gap of black males

By Mayrene Bates | From Page: A2

 
Vacaville art gallery schedules open house

By Amy Maginnis-Honey | From Page: A3

What’s the matter with Kansas Street?

By Ryan McCarthy | From Page: A3, 12 Comments | Gallery

 
Sandbags available in advance of storms

By Ryan McCarthy | From Page: A3 | Gallery

Governments shut doors for holiday

By Glen Faison | From Page: A4

 
Fairfield police log: Nov. 25, 2014

By Susan Hiland | From Page: A12

 
Suisun police log: Nov. 25, 2014

By Susan Hiland | From Page: A12

Weather for Nov. 27, 2014

By Daily Republic | From Page: B12

 
.

US / World

Passengers in Russia’s Arctic give airliner a push

By The Associated Press | From Page: A2

 
Court: No warrant needed to draw parolees’ blood

By The Associated Press | From Page: A3

Armored vehicle nixed by Davis ends up in Woodland

By The Associated Press | From Page: A3

 
Union focuses on security guards at Apple

By The Associated Press | From Page: A4

Homeless man beaten to death in San Francisco

By The Associated Press | From Page: A4

 
Obama administration sets stricter smog standard

By The Associated Press | From Page: A4

Obama gets the bill for White House Thanksgiving

By The Associated Press | From Page: A4

 
Heart stent for Supreme Court Justice Ginsburg, 81

By The Associated Press | From Page: A4

Snow makes Thanksgiving travel ‘a little hairy’

By The Associated Press | From Page: A4

 
American among hostages targeted in Yemen raid

By The Associated Press | From Page: A5

Sierra Leone official: Ebola may have reached peak

By The Associated Press | From Page: A5

 
Hong Kong police arrest key protesters, clear site

By The Associated Press | From Page: A5

Canada police arrest ex-radio host in sex case

By The Associated Press | From Page: A5

 
Impoverished Lebanese city is target for IS group

By The Associated Press | From Page: A5

Spy balloons give police new view of Jerusalem

By The Associated Press | From Page: A5

 
Small crowd protests in Oakland for third night

By The Associated Press | From Page: A12, 1 Comment

Ferguson residents clean up, hope for calm night

By The Associated Press | From Page: A12, 1 Comment

 
Prosecutor faces new criticism over Ferguson case

By The Associated Press | From Page: A12

Grand jury documents rife with inconsistencies

By The Associated Press | From Page: A12, 2 Comments

 
.

Living

Today in History: Nov. 27, 2014

By The Associated Press | From Page: A2, 1 Comment

 
Community Calendar: Nov. 27, 2014

By Susan Hiland | From Page: A2

Horoscope for Nov. 27, 2014

By Holiday Mathis | From Page: A9

 
Nursing homes full of opportunities for giving

By Kathy Mitchell and Marcy Sugar | From Page: A9

.

Entertainment

TVGrid

By Daily Republic Syndicated Content | From Page: B5

 
With shake-ups, AC/DC perseveres with album, tour

By The Associated Press | From Page: A13

875 hours of holiday programming on TV last year

By The Associated Press | From Page: A13

 
Missing model-restaurateur B. Smith found in NYC

By The Associated Press | From Page: A13

Garth Brooks cites Ferguson for cancellation

By The Associated Press | From Page: A13

 
University in Tennessee cancels Cosby appearance

By The Associated Press | From Page: A13, 1 Comment

Tom Hanks, wife to host Christmas tree lighting

By The Associated Press | From Page: A13

 
.

Sports

Panda heads put away with Sandoval’s departure

By The Associated Press | From Page: B1 | Gallery

 
All City football: Vikings sweep top honors

By Paul Farmer | From Page: B1 | Gallery

Seahawks, 49ers meet for 1st time this season

By The Associated Press | From Page: B1

 
NFL might not flex any Sunday night games in 2014

By The Associated Press | From Page: B2

San Francisco’s bid for 2024 Olympics taking shape

By The Associated Press | From Page: B2 | Gallery

 
Sharks sign emergency backup goalie

By The Associated Press | From Page: B3

Spurs’ Popovich undergoes medical procedure

By The Associated Press | From Page: B3

 
AP source: Tomas in process of deal with D’backs

By The Associated Press | From Page: B3

Harden leads Rockets past Kings 102-89

By The Associated Press | From Page: B3

 
Smith to start at QB for Jets vs. Dolphins on MNF

By The Associated Press | From Page: B3

Butler knocks off No. 5 North Carolina, 74-66

By The Associated Press | From Page: B3

 
RG3 benched: Redskins to start Colt McCoy vs. Indy

By The Associated Press | From Page: B3

Raiders’ Woodson expects to play in 2015

By The Associated Press | From Page: B3

 
Curry, 3s too much for Magic; Warriors win 111-96

By The Associated Press | From Page: B3 | Gallery

Atletico Madrid, Arsenal reach knockout phase

By The Associated Press | From Page: B12

 
.

Business

FBI data show thousands of gun sales beat checks

By The Associated Press | From Page: B5

 
US new home sales up 0.7 percent in October

By The Associated Press | From Page: B5

US agency threatens to act against air bag maker

By The Associated Press | From Page: B5

 
Twitter now tracks other apps you’ve installed

By The Associated Press | From Page: B5

Health insurance sign-ups coming to shopping malls

By The Associated Press | From Page: B5

 
.

Obituaries

Dora Maria Aranda

By Susan Hiland | From Page: A4

 
Adrian Looy

By Nancy Green | From Page: A4

.

Comics

For Better or Worse

By Daily Republic Syndicated Content | From Page: A8

 
Peanuts

By Daily Republic Syndicated Content | From Page: A8

Zits

By Daily Republic Syndicated Content | From Page: A8

 
Pickles

By Daily Republic Syndicated Content | From Page: A8

Baby Blues

By Daily Republic Syndicated Content | From Page: A8

 
Sally Forth

By Daily Republic Syndicated Content | From Page: A8

Baldo

By Daily Republic Syndicated Content | From Page: A8

 
Get Fuzzy

By Daily Republic Syndicated Content | From Page: A8

Garfield

By Daily Republic Syndicated Content | From Page: A8

 
Rose is Rose

By Daily Republic Syndicated Content | From Page: A8

Beetle Bailey

By Daily Republic Syndicated Content | From Page: A8

 
Blondie

By Daily Republic Syndicated Content | From Page: A8

Wizard of Id

By Daily Republic Syndicated Content | From Page: A8

 
B.C.

By Daily Republic Syndicated Content | From Page: A8

Frank and Ernest

By Daily Republic Syndicated Content | From Page: A8

 
Dilbert

By Daily Republic Syndicated Content | From Page: A8

Bridge

By Daily Republic Syndicated Content | From Page: A9

 
Cryptoquote

By Daily Republic Syndicated Content | From Page: A9

Word Sleuth

By Daily Republic Syndicated Content | From Page: A9

 
Sudoku

By Daily Republic Syndicated Content | From Page: A9

Crossword

By Daily Republic Syndicated Content | From Page: A9

 
.

Holiday Gift Guide 2014

Why millennials prefer electronic gift cards

By The Washington Post | From Page: HGG2

How to give holiday gift cards

By Metro Creative Graphics | From Page: HGG2

How to establish gift spending limits

By Metro Creative Graphics | From Page: HGG3

Teen gifts: ideas for hard-to-buy-for big kids

By The Associated Press | From Page: HGG3

Novice crafter? There’s a project for that!

By The Associated Press | From Page: HGG6

Gift ideas for the special seniors in your life

By Metro Creative Graphics | From Page: HGG6

Time and money-saving holiday gift ideas

By Statepoint Media | From Page: HGG7

Oy vey, holidays! Does Hanukkah wannabe Christmas?

By The Associated Press | From Page: HGG7

How to save on high-tech gifts

By Metro Creative Graphics | From Page: HGG10

Shop top finalists for the CFDA/Vogue Fashion Fund

By The Associated Press | From Page: HGG11

Sharing music: a personal gift made easy by tech

By The Associated Press | From Page: HGG12

Great gifts for music lovers

By Metro Creative Graphics | From Page: HGG13

Kitchen gift-giving made easy with personality profiles

By Metro Creative Graphics | From Page: HGG14

Great gifts for the family foodie

By Metro Creative Graphics | From Page: HGG14

Holiday shows abound in Solano County

By Amy Maginnis-Honey | From Page: HGG17

Great gifts for people who love to read

By Metro Creative Graphics | From Page: HGG19

An oft-elusive yet gifty treat: coffee table books

By The Associated Press | From Page: HGG19

Steps to take before giving pets as gifts

By Metro Creative Graphics | From Page: HGG22

2014 holiday toy predictions

By Metro Creative Graphics | From Page: HGG22

Eco-friendly gift ideas for ‘green’ giving

By Metro Creative Graphics | From Page: HGG22

Things to consider before buying this holiday season

By Metro Creative Graphics | From Page: HGG22

Trend-setting gifts for the women on your holiday shopping list

By Brandpoint Content | From Page: HGG23

Gifts to keep kids engaged

By Metro Creative Graphics | From Page: HGG25

Gift wrap tricks to save time

By Metro Creative Graphics | From Page: HGG26

Save time and energy with a family gift this holiday season

By Brandpoint Content | From Page: HGG27

Gift exchange dos and don’ts

By Metro Creative Graphics | From Page: HGG30

Right at Home: gifts you can use – and use up

By The Associated Press | From Page: HGG30

How to send gifts to faraway friends and family

By Metro Creative Graphics | From Page: HGG30