Wednesday, August 20, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Vacaville school board candidates sound off during forum

By Susan Winlow | From Page: A1 | Gallery

 
Memorial flight honors beloved Gordon Valley man

By Ian Thompson | From Page: A1, 2 Comments | Gallery

 
Recology goes pink to trash cancer

By Glen Faison | From Page: A2 | Gallery

 
Supervisors take no action in closed session

By Barry Eberling | From Page: A3

Curtola park-and-ride bill goes to governor

By Barry Eberling | From Page: A3

 
Group announces driver’s license law presentation

By Amy Maginnis-Honey | From Page: A3

City reaches milestone for train station project

By Barry Eberling | From Page: A3, 15 Comments | Gallery

 
Caltrans advises Highway 12 delays likely

By Barry Eberling | From Page: A3, 2 Comments

DUI checkpoint nets arrests in Vacaville

By Ryan McCarthy | From Page: A5, 3 Comments

 
Library’s teen board to meet next week

By Glen Faison | From Page: A5

 
South Solano Dems schedule candidates meet, greet

By Glen Faison | From Page: A5

Sandy’s 101 Omlettes closes in Fairfield

By Ryan McCarthy | From Page: A5

 
Man convicted of failing to register as sex offender

By Ryan McCarthy | From Page: A5, 11 Comments | Gallery

 
Geiger sworn in as Fairfield planning commissioner

By Ryan McCarthy | From Page: A6

Faith in Action puts out call for volunteers

By Glen Faison | From Page: A6

 
 
Yippie job training program seeks applicants

By Glen Faison | From Page: A6

 
Love, a legend, come to theaters

By Amy Maginnis-Honey | From Page: A7

Suisun City police log: Aug. 17, 2014

By Glen Faison | From Page: A12

 
Fairfield police log: Aug. 16, 2014

By Glen Faison | From Page: A12

Fairfield police log: Aug. 17, 2014

By Glen Faison | From Page: A12

 
Suisun City police log: Aug. 18, 2014

By Susan Hiland | From Page: A12

Fairfield police log: Aug. 18, 2014

By Susan Hiland | From Page: A12

 
Suisun City police log: Aug. 16, 2014

By Glen Faison | From Page: A12

.

US / World

How can authorities restore order in Ferguson?

By The Associated Press | From Page: A1 | Gallery

 
Holder brings his civil rights push to Ferguson

By The Associated Press | From Page: A1

Strong DOJ response to Ferguson seeks truth, calm

By The Associated Press | From Page: A1

 
As protests rage, Obama struggles to find his role

By The Associated Press | From Page: A1 | Gallery

Ferguson pledges outreach efforts after shooting

By The Associated Press | From Page: A1

 
Prison company pays $8 million in back wages

By The Associated Press | From Page: A6

Some evacuees of Yosemite-area fire can go home

By The Associated Press | From Page: A6 | Gallery

 
Officials say Lake Tahoe imperiled by wildfires

By The Associated Press | From Page: A8

Committee approves higher pension calculations

By The Associated Press | From Page: A8

 
Veteran rock climber killed in fall in Yosemite

By The Associated Press | From Page: A8 | Gallery

Texas Gov. Perry booked on abuse of power charges

By The Associated Press | From Page: A9

 
US officials: Video shows American’s beheading

By The Associated Press | From Page: A9

NY took quick precautions after in-custody death

By The Associated Press | From Page: A10 | Gallery

 
AP Exclusive: US changing no-fly list rules

By The Associated Press | From Page: A10

Tens of thousands march on Pakistan’s parliament

By The Associated Press | From Page: A13 | Gallery

 
.

Opinion

Serve and protect? Certainly not

By Letter to the Editor | From Page: A11, 21 Comments

 
Question of the week: Does school start too soon?

By Daily Republic | From Page: A11

 
Government trying to steal rights

By Letter to the Editor | From Page: A11, 2 Comments

No getting away from corruption in state government

By Thomas Elias | From Page: A11

 
Editorial cartoons for Aug. 20, 2014

By Daily Republic Syndicated Content | From Page: A11

 
.

Living

Today in History: Aug. 20, 2014

By The Associated Press | From Page: A2

 
Community Calendar: Aug. 20, 2014

By Susan Hiland | From Page: A2

Horoscopes: Aug. 20, 2014

By Holiday Mathis | From Page: B5

 
Our daughter says she hates her mother and refuses to talk to us

By Kathy Mitchell and Marcy Sugar | From Page: B5

 
10 Things: 10 fresh ways to dress corn on the cob

By The Associated Press | From Page: B6

Think beyond the slice with refreshing watermelon

By J.M. Hirsch | From Page: B6

 
.

Entertainment

TVGrid

By Daily Republic Syndicated Content | From Page: B7

 
Dwayne ‘The Rock’ Johnson set for DC Comics film

By The Associated Press | From Page: A7

Don Pardo, iconic TV announcer, dies at 96

By The Associated Press | From Page: A7

 
Wife to bury Kasem in Norway, cites heritage

By The Associated Press | From Page: A7

.

Sports

 
Rancho Solano women’s team vying for spot in nationals

By Paul Farmer | From Page: B1 | Gallery

49ers sign defensive lineman Dorsey to extension

By The Associated Press | From Page: B1

 
49ers’ Dawson eager to get back out kicking after misses

By The Associated Press | From Page: B1 | Gallery

Kluwe, Vikings reach settlement to avert lawsuit

By The Associated Press | From Page: B2

 
Islanders announce sale of minority stake of club

By The Associated Press | From Page: B2

Ohio State: Injured QB Miller done for the season

By The Associated Press | From Page: B2

 
Past US Open champs Djokovic, Federer seeded 1-2 in U.S. Open

By The Associated Press | From Page: B2

Joe Gibbs Racing hires Carl Edwards and Daniel Suarez

By The Associated Press | From Page: B2

 
Philadelphia’s Mo’ne Davis knows hoops, too

By The Associated Press | From Page: B2

Veteran NBA ref Bavetta retires after 39 years

By The Associated Press | From Page: B2

 
Raiders still waiting for Hayden to get healthy

By The Associated Press | From Page: B2 | Gallery

As Durant steps back, US team is moving forward

By The Associated Press | From Page: B2 | Gallery

 
.

Business

Ballmer steps down from Microsoft board

By The Associated Press | From Page: B7

 
Competition heats up for Tesla’s gigafactory

By Mcclatchy-Tribune News Service | From Page: B7

Peanut, almond butter recalled for salmonella risk

By The Associated Press | From Page: B8, 1 Comment

 
McDonald’s to sell packaged coffee nationally

By The Associated Press | From Page: B8

Consumer prices edge up 0.1 percent in July

By The Associated Press | From Page: B8

 
Stocks rise as US home construction rebounds

By The Associated Press | From Page: B8

US home construction jumps 15.7 percent in July

By The Associated Press | From Page: B8

 
.

Obituaries

Eddie Lee Staten

By Nancy Green | From Page: A4

 
June Canaris-Heath

By Brad Stanhope | From Page: A4

George ‘Wayne’ Hause

By Nancy Green | From Page: A4

 
Sharon Ilene Boyd

By Nancy Green | From Page: A4

Richard Ray Jr.

By Nancy Green | From Page: A4

 
Horace James Sam

By Nancy Green | From Page: A4

Joseph ‘Joey’ Kenneth Meyers

By Nancy Green | From Page: A4

 
Defrances Jean Freeman-Jefferson

By Susan Hiland | From Page: A4

.

Comics

Garfield

By Daily Republic Syndicated Content | From Page: B4

 
Wizard of Id

By Daily Republic Syndicated Content | From Page: B4

Get Fuzzy

By Daily Republic Syndicated Content | From Page: B4

 
Zits

By Daily Republic Syndicated Content | From Page: B4

Dilbert

By Daily Republic Syndicated Content | From Page: B4

 
Blondie

By Daily Republic Syndicated Content | From Page: B4

Sally Forth

By Daily Republic Syndicated Content | From Page: B4

 
Frank and Ernest

By Daily Republic Syndicated Content | From Page: B4

Peanuts

By Daily Republic Syndicated Content | From Page: B4

 
Beetle Bailey

By Daily Republic Syndicated Content | From Page: B4

For Better or Worse

By Daily Republic Syndicated Content | From Page: B4

 
Baby Blues

By Daily Republic Syndicated Content | From Page: B4

B.C.

By Daily Republic Syndicated Content | From Page: B4

 
Pickles

By Daily Republic Syndicated Content | From Page: B4

Baldo

By Daily Republic Syndicated Content | From Page: B4

 
Rose is Rose

By Daily Republic Syndicated Content | From Page: B4

Word Sleuth

By Daily Republic Syndicated Content | From Page: B5

 
Cryptoquote

By Daily Republic Syndicated Content | From Page: B5

Bridge

By Daily Republic Syndicated Content | From Page: B5

 
Crossword

By Daily Republic Syndicated Content | From Page: B5

Sudoku

By Daily Republic Syndicated Content | From Page: B5