Thursday, October 23, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Children run for the sake of running

By Susan Hiland | From Page: A1, 1 Comment | Gallery

 
Real McCoy ferry to shut down Thursday

By Ian Thompson | From Page: A3

 
Nairobi, oldest giraffe at Six Flags, dies

By Amy Maginnis-Honey | From Page: A3 | Gallery

Day of Remembrance focuses on domestic violence prevention

By Amy Maginnis-Honey | From Page: A3 | Gallery

 
 
60th Air Mobility Wing gets outstanding unit award

By Ian Thompson | From Page: A3

 
Audubon group to offer wetlands walk, bird workshop

By Susan Winlow | From Page: A4

 
 
Trailer rolls, knocks down pole, damages roadway

By Susan Winlow | From Page: A4

 
Bridge to Life gets extension for temporary kitchen

By Ryan McCarthy | From Page: A5

Pumpkin bob set at Fairfield city pool

By Ryan McCarthy | From Page: A5

 
Fairfield police log: Oct. 21, 2014

By Susan Hiland | From Page: A12

Suisun City police log: Oct. 21, 2014

By Susan Hiland | From Page: A12

 
.

US / World

Canada’s PM says shooting rampage was terrorism

By The Associated Press | From Page: A1, 1 Comment

 
125 San Francisco inmates to get computer tablets

By The Associated Press | From Page: A5, 2 Comments

California malpractice cap generates big spending

By The Associated Press | From Page: A5

 
Huge gold nugget going up for sale in California

By The Associated Press | From Page: A5

Healdsburg bans tobacco sales to anyone under 21

By The Associated Press | From Page: A5, 1 Comment

 
Davis votes to return armored vehicle

By The Associated Press | From Page: A5, 1 Comment

Study looks at lane splitting in California

By The Associated Press | From Page: A5, 3 Comments

 
Goofy dinosaur blends Barney and Jar Jar Binks

By The Associated Press | From Page: A6

Social Security benefits get another tiny increase

By The Associated Press | From Page: A6, 1 Comment

 
US to track everyone coming from Ebola nations

By The Associated Press | From Page: A6

Teens’ travel renews concerns about terror appeal

By The Associated Press | From Page: A6

 
Blackwater guards found guilty in Iraq shootings

By The Associated Press | From Page: A6, 1 Comment

Methodist panel hears appeal over gay wedding

By The Associated Press | From Page: A6

 
AP-GfK Poll: Public wants tighter Ebola screening

By The Associated Press | From Page: A6

Key features of rigorous new US Ebola monitoring

By The Associated Press | From Page: A6

 
Missile, fire from Egypt wounds 2 Israeli troops

By The Associated Press | From Page: A10

Mexico: Mayor linked to deadly attack on students

By The Associated Press | From Page: A10, 1 Comment

 
Nigeria truce is shaky, no news of abducted girls

By The Associated Press | From Page: A10

Iraqi Kurdish lawmakers OK fighters for Syria

By The Associated Press | From Page: A10

 
Analysis: Fowle was North Korea’s easiest US case

By The Associated Press | From Page: A10

UK man faked coma for 2 years to avoid court

By The Associated Press | From Page: A10

 
Prisons agree to end race policy

By The Associated Press | From Page: A12, 1 Comment

.

Opinion

 
Don’t make this mistake after voting

By Kelvin Wade | From Page: A11, 2 Comments

Editorial Cartoons: Oct. 23, 2014

By Daily Republic Syndicated Content | From Page: A11

 
Living a Democrat PC nightmare

By Letter to the Editor | From Page: A11, 8 Comments

Real reason to vote yes on 46

By Letter to the Editor | From Page: A11, 1 Comment

 
Keck did good job researching issue

By Letter to the Editor | From Page: A11

.

Living

Today in History: Oct. 23, 2014

By The Associated Press | From Page: A2

 
Community Calendar: Oct. 23, 2014

By Susan Hiland | From Page: A2

 
Horoscopes: Oct. 23, 2014

By Holiday Mathis | From Page: A9

My husband visits dating sites, stays out until 3 or 4 a.m.

By Kathy Mitchell and Marcy Sugar | From Page: A9

 
.

Entertainment

TVGrid

By Daily Republic Syndicated Content | From Page: B6

 
NBC promoting Weir, Lipinski to top skating team

By The Associated Press | From Page: A7

Annie Lennox embraces jazzy ‘Nostalgia’

By The Associated Press | From Page: A7

 
Renee Zellweger: ‘People don’t know me in my 40s’

By The Associated Press | From Page: A7

Sax player behind ‘Baker Street’ solo dies at 60

By The Associated Press | From Page: A7, 1 Comment

 
‘SNL’ adds black woman to cast from writers room

By The Associated Press | From Page: A7

.

Sports

Giants’ bullpen melts down in 7-2 loss to Royals

By The Associated Press | From Page: B1

 
Warriors hoping Kerr is final piece for title run

By The Associated Press | From Page: B1 | Gallery

Local Report: Armijo XC teams finish MEL 10-0

By Daily Republic staff | From Page: B1

 
Carr confident despite Raiders’ winless start

By The Associated Press | From Page: B1 | Gallery

AP source: Goodell told to testify in Rice appeal

By The Associated Press | From Page: B1 | Gallery

 
Kings measuring success on ‘wins and losses’

By The Associated Press | From Page: B1

Probe: UNC academic fraud was ‘shadow curriculum’

By The Associated Press | From Page: B2

 
World Series rating for opener drops to low

By The Associated Press | From Page: B2

Beaten Giants fan shows significant progress

By The Associated Press | From Page: B2

 
Polian, Wolf nominated for Pro Football Hall of Fame

By The Associated Press | From Page: B2

Slumping Bears hope to slow No. 6 Oregon, Mariota

By The Associated Press | From Page: B2

 
Stanford picked to win Pac-12 regular-season crown

By The Associated Press | From Page: B2

NBA owners fail to pass lottery reform

By The Associated Press | From Page: B2

 
Leafs-Senators game postponed after shootings

By The Associated Press | From Page: B2

Phony World Series tickets, merchandise seized

By The Associated Press | From Page: B2

 
Request denied to remove judge on Peterson case

By The Associated Press | From Page: B2

Brad Keselowski not concerned with popularity

By The Associated Press | From Page: B3 | Gallery

 
SHR swaps crews for Danica Patrick and Kurt Busch

By The Associated Press | From Page: B3 | Gallery

’85 World Series Royals relishing playoff run

By The Associated Press | From Page: B4 | Gallery

 
From Mexico to the World Series, Petit Giants’ shines

By The Associated Press | From Page: B4 | Gallery

 
This date in sports history for Thursday, Oct. 23, 2014

By The Associated Press | From Page: B5

.

Business

FedEx, UPS make plans for a better holiday season

By The Associated Press | From Page: B6

 
The top 20 US cities for tech startup funding

By The Associated Press | From Page: B6

‘Silicon Beach’ brings tech boom to Los Angeles

By The Associated Press | From Page: B6

 
BofA to refund Apple Pay customers charged twice

By The Associated Press | From Page: B7

Google unveils app for managing Gmail inboxes

By The Associated Press | From Page: B7

 
Government ups air bag warning to 7.8M vehicles

By The Associated Press | From Page: B7

Camel maker Reynolds snuffs out workplace smoking

By The Associated Press | From Page: B7

 
.

Obituaries

Mark Dean Lindsay

By Nancy Green | From Page: A4

 
Keith Bowen

By Nancy Green | From Page: A4, 1 Comment

Blanche Stevens

By Nancy Green | From Page: A4

 
Dr. Robert M. Takamoto

By Nancy Green | From Page: A4

.

Comics

Frank and Ernest

By Daily Republic Syndicated Content | From Page: A8

 
Rose is Rose

By Daily Republic Syndicated Content | From Page: A8

Baby Blues

By Daily Republic Syndicated Content | From Page: A8

 
Garfield

By Daily Republic Syndicated Content | From Page: A8

For Better or Worse

By Daily Republic Syndicated Content | From Page: A8

 
Blondie

By Daily Republic Syndicated Content | From Page: A8

Pickles

By Daily Republic Syndicated Content | From Page: A8

 
Get Fuzzy

By Daily Republic Syndicated Content | From Page: A8

Wizard of Id

By Daily Republic Syndicated Content | From Page: A8

 
B.C.

By Daily Republic Syndicated Content | From Page: A8

Sally Forth

By Daily Republic Syndicated Content | From Page: A8

 
Zits

By Daily Republic Syndicated Content | From Page: A8

Baldo

By Daily Republic Syndicated Content | From Page: A8

 
Beetle Bailey

By Daily Republic Syndicated Content | From Page: A8

Dilbert

By Daily Republic Syndicated Content | From Page: A8

 
Peanuts

By Daily Republic Syndicated Content | From Page: A8

Bridge

By Daily Republic Syndicated Content | From Page: A9

 
Crossword

By Daily Republic Syndicated Content | From Page: A9

Sudoku

By Daily Republic Syndicated Content | From Page: A9

 
Word Sleuth

By Daily Republic Syndicated Content | From Page: A9

Cryptoquote

By Daily Republic Syndicated Content | From Page: A9