Thursday, January 29, 2015
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

 
1st release for birds with mysterious goo a success

By Amy Maginnis-Honey | From Page: A1 | Gallery

4-H Annual Presentation Day returns in February

By Susan Hiland | From Page: A3

 
Vacaville SWAT team serves search warrant

By Kevin W. Green | From Page: A3

Real estate occupancy continues to climb

By Kevin W. Green | From Page: A3, 1 Comment

 
 
Council backs beer, wine sales for Vacaville store

By Ryan McCarthy | From Page: A3

Vacaville police seek help to find sex offender

By Kevin W. Green | From Page: A3, 2 Comments | Gallery

 
Sweep by sheriff’s team nets 4 arrests

By Kevin W. Green | From Page: A3, 3 Comments

 
 
Travis starts work on Functional Fitness Center

By Ian Thompson | From Page: A3

 
Boy Scouts to screen award-winning film

By Ian Thompson | From Page: A3

 
Church makes ready for health, wellness fair

By Susan Hiland | From Page: A3

Fairfield police log: Jan. 27, 2015

By Susan Hiland | From Page: A10

 
Suisun City police log: Jan. 27, 2015

By Susan Hiland | From Page: A10, 1 Comment

.

US / World

 
Air Force probing alleged ‘treason’ remark by general

By The Associated Press | From Page: A1, 1 Comment | Gallery

Expect tiny tuxes but no real puppy love at doggy weddings

By The Associated Press | From Page: A2 | Gallery

 
Large salmon release planned

By The Associated Press | From Page: A4

Violations mount for toxic recycler

By The Associated Press | From Page: A4

 
Quake rattles N. California coast

By The Associated Press | From Page: A4

Second arrest in student stabbing

By The Associated Press | From Page: A4

 
Marshals track down missing treasure hunter

By The Associated Press | From Page: A5

‘Drunk’ excuse falls flat in Vandy rape trial

By The Associated Press | From Page: A5

 
Attorney General nominee defends Obama immigration changes

By The Associated Press | From Page: A5, 1 Comment | Gallery

Police seek law to alter Google app

By The Associated Press | From Page: A5, 1 Comment

 
Investigation stems from police-involved shooting outbreak

By The Associated Press | From Page: A6

Hezbollah missiles kill soldiers

By New York Times | From Page: A6

 
ISIS extends hostage deadline

By The Associated Press | From Page: A6

Euro coast guards scramble to locate Syrian ghost ship

By The Associated Press | From Page: A6

 
Chinese regulators go after online sale of fake goods

By The Associated Press | From Page: A6

Tape: Scientist offers to build nuke bomb targeting New York

By The Associated Press | From Page: A10 | Gallery

 
.

Opinion

India now has 322 billion reasons to fix economy

By William Pesek | From Page: A7

 
Don’t brush off bullying

By Kelvin Wade | From Page: A7, 1 Comment

 
Editorial Cartoon: Jan. 29, 2015

By Daily Republic Syndicated Content | From Page: A7

Just be honest and come forward

By Letter to the Editor | From Page: A7, 1 Comment

 
A truly misinformed writer

By Letter to the Editor | From Page: A7, 5 Comments

.

Living

Community Calendar: Jan. 29, 2015

By Susan Hiland | From Page: A2

 
Today in History: Jan. 29, 2015

By The Associated Press | From Page: A2

Deadbeat boyfriend ruined my relationship with my granddaughter

By Kathy Mitchell and Marcy Sugar | From Page: A9

 
Horoscope Jan. 29, 2015

By Holiday Mathis | From Page: A9

.

Entertainment

TVGrid

By Daily Republic Syndicated Content | From Page: B5

 
Theater legend Joel Grey reveals that he is gay

By The Associated Press | From Page: B5, 1 Comment

Super Bowl advertisers aim not to offend

By The Associated Press | From Page: B5

 
.

Sports

Kings center DeMarcus Cousins hoping to make All-Star team

By The Associated Press | From Page: B1

 
Rodriguez wrestlers pull out 34-24 win over Wood

By Brian Arnold | From Page: B1 | Gallery

 
Solano men cruise past LMC for biggest win of season

By Daily Republic staff | From Page: B2

NFL players who started young show more thinking problems

By The Associated Press | From Page: B2

 
GM John Schneider has been architect of Seahawks’ success

By The Associated Press | From Page: B2

Patriots not dwelling on last Super Bowl loss in Arizona

By The Associated Press | From Page: B2

 
Woods returns to Phoenix with plenty of memories

By The Associated Press | From Page: B2

Tony Stewart acquires national sprint car series tour

By The Associated Press | From Page: B2

 
Korda, Lewis, Munoz tied for lead at LPGA season opener

By The Associated Press | From Page: B3

Head of NCAA enforcement: Academic misconduct on rise

By The Associated Press | From Page: B3

 
Chicago Cubs’ Ernie Banks statue moved downtown for tribute

By The Associated Press | From Page: B3

Kobe Bryant has surgery, expected to be out for 9 months

By The Associated Press | From Page: B3

 
This date in sports history for Jan. 29, 2015

By The Associated Press | From Page: B4

 
.

Business

.

Obituaries

Joseph Phillip Raiff

By Nancy Green | From Page: A4

 
Dzhon Athanc

By Nancy Green | From Page: A4

.

Comics

Peanuts

By Daily Republic Syndicated Content | From Page: A8

 
For Better or Worse

By Daily Republic Syndicated Content | From Page: A8

Blondie

By Daily Republic Syndicated Content | From Page: A8

 
Zits

By Daily Republic Syndicated Content | From Page: A8

Rose is Rose

By Daily Republic Syndicated Content | From Page: A8

 
Baby Blues

By Daily Republic Syndicated Content | From Page: A8

Baldo

By Daily Republic Syndicated Content | From Page: A8

 
Get Fuzzy

By Daily Republic Syndicated Content | From Page: A8

Sally Forth

By Daily Republic Syndicated Content | From Page: A8

 
B.C.

By Daily Republic Syndicated Content | From Page: A8

Beetle Bailey

By Daily Republic Syndicated Content | From Page: A8

 
Frank and Ernest

By Daily Republic Syndicated Content | From Page: A8

Garfield

By Daily Republic Syndicated Content | From Page: A8

 
Dilbert

By Daily Republic Syndicated Content | From Page: A8

Pickles

By Daily Republic Syndicated Content | From Page: A8

 
Wizard of Id

By Daily Republic Syndicated Content | From Page: A8

Cryptoquote

By Daily Republic Syndicated Content | From Page: A9

 
Sudoku

By Daily Republic Syndicated Content | From Page: A9

Crossword

By Daily Republic Syndicated Content | From Page: A9

 
Bridge

By Daily Republic Syndicated Content | From Page: A9

Word Sleuth

By Daily Republic Syndicated Content | From Page: A9

 

Parse error: syntax error, unexpected '<<' (T_SL) in /www/newspaperfoundation.org/html/wp-content/themes/broadsheet/footer.php on line 101