Saturday, October 25, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

 
 
Fall Harvest Festival brings children back to school

By Susan Hiland | From Page: A3 | Gallery

 
Optimist Club brings youth together for Halloween golf

By Amy Maginnis-Honey | From Page: A3

 
Cut-a-thon to help fight cancer, abuse

By Susan Hiland | From Page: A3

School board candidates forum set next week

By Susan Winlow | From Page: A4

 
 
Staying active may prolong your life

By Scott Anderson | From Page: B8

 
Suisun City police log: Oct. 23, 2014

By Susan Hiland | From Page: A9

.

US / World

Suspect arrested in death of 2 California deputies

By The Associated Press | From Page: A1, 3 Comments

 
KC-10 from Travis lands in Houston, smoke in cockpit

By The Associated Press | From Page: A3

Reagan astrologer, Joan Quigley, dies at 87

By The Associated Press | From Page: A4, 2 Comments

 
Jury says castrated sex offender should be freed

By The Associated Press | From Page: A4

School gunman was Homecoming prince, students say

By The Associated Press | From Page: A5, 2 Comments

 
Lava creeps toward road on Hawaii’s Big Island

By The Associated Press | From Page: A5

Remains belong to missing Virginia student

By The Associated Press | From Page: A5

 
Dallas nurse receives thanks, hug from Obama

By The Associated Press | From Page: A5, 14 Comments

NY, NJ order Ebola quarantine for doctors, others

By The Associated Press | From Page: A9

 
Gunman in Canada attack complained about mosque

By The Associated Press | From Page: A10

Egypt declares emergency in northern Sinai

By The Associated Press | From Page: A10

 
Militant group said to be using chlorine bombs

By The Associated Press | From Page: A10, 1 Comment

Putin accuses US of undermining global stability

By The Associated Press | From Page: A10

 
.

Opinion

Return Garamendi to Congress

By Daily Republic | From Page: A8, 16 Comments

 
Editorial Cartoons: Oct. 25, 2014

By Daily Republic Syndicated Content | From Page: A8

SEIU shouldn’t own Board of Supervisors

By Letter to the Editor | From Page: A8, 7 Comments

 
Vote, and make a difference

By Letter to the Editor | From Page: A8, 2 Comments

Yes on Measure A

By Letter to the Editor | From Page: A8, 2 Comments

 
Spering best choice for county supervisor

By Daily Republic | From Page: A8, 7 Comments

.

Living

Today in History: Oct. 25, 2014

By The Associated Press | From Page: A2

 
Community Calendar: Oct. 25, 2014

By Susan Hiland | From Page: A2

Horoscopes: Oct. 25, 2014

By Holiday Mathis | From Page: A7

 
My mother-in-law wants me to convert to Catholicism, but I don’t want to

By Kathy Mitchell and Marcy Sugar | From Page: A7

Hello Kitty turning 40, and the birthday bash will be ‘supercute’

By Mcclatchy-Tribune News Service | From Page: B8

 
.

Entertainment

TLC cancels its ‘Honey Boo Boo’ series

By The Associated Press | From Page: B9

 
P.D. James’ riff on Jane Austen comes to TV

By The Associated Press | From Page: B9

TVGrid

By Daily Republic Syndicated Content | From Page: B9

 
.

Sports

Vintage rolls past Armijo, 55-8

By Mike Corpos | From Page: B1

 
Mustangs fall flat in rout by Wildcats

By Marcus Lomtong | From Page: B1, 3 Comments

Royals beat Giants 3-2 for 2-1 World Series lead

By The Associated Press | From Page: B1 | Gallery

 
Vargas to take on Vogelsong in Game 4 of Series

By The Associated Press | From Page: B1 | Gallery

Falcons hang with Wolves in 34-8 setback

By Paul Farmer | From Page: B1, 1 Comment | Gallery

 
Hamilton helps Vanden sink Vallejo, 35-0

By Nick DeCicco | From Page: B1

Unfazed, 49ers coach Jim Harbaugh doing it his way

By The Associated Press | From Page: B2

 
Lloyd leads US women past Mexico 3-0

By The Associated Press | From Page: B2

Raiders’ Woodley, Young expected to be placed on IR

By The Associated Press | From Page: B2

 
Henley’s putting gets him lead at Sea Island

By The Associated Press | From Page: B2

Judge halts New Jersey’s sports betting plan

By The Associated Press | From Page: B2

 
Joe Maddon exercises opt-out, won’t return to Rays

By The Associated Press | From Page: B2

Jamie McMurray bests Chase drivers to win pole

By The Associated Press | From Page: B2 | Gallery

 
Attorney: NFL, Ravens not helping union in Rice probe

By The Associated Press | From Page: B2

SCC women’s soccer team falls to Mendocino 3-1

By Daily Republic staff | From Page: B2

 
This date in sports history for Saturday, Oct. 25, 2014

By The Associated Press | From Page: B3

 
.

Business

US official: Auto safety agency under review

By The Associated Press | From Page: B4

 
Ford profit falls in third quarter on truck costs

By The Associated Press | From Page: B4

Procter & Gamble taking out its batteries

By The Associated Press | From Page: B4

 
UPS expects double-digit surge in Dec shipments

By The Associated Press | From Page: B4

US new-home sales close to flat in September

By The Associated Press | From Page: B4

 
.

Obituaries

Mark Dean Lindsay

By Nancy Green | From Page: A4, 1 Comment

 
.

Comics

Frank and Ernest

By Daily Republic Syndicated Content | From Page: A6

 
Sally Forth

By Daily Republic Syndicated Content | From Page: A6

Wizard of Id

By Daily Republic Syndicated Content | From Page: A6

 
Blondie

By Daily Republic Syndicated Content | From Page: A6

Zits

By Daily Republic Syndicated Content | From Page: A6

 
For Better or Worse

By Daily Republic Syndicated Content | From Page: A6

Peanuts

By Daily Republic Syndicated Content | From Page: A6

 
Pickles

By Daily Republic Syndicated Content | From Page: A6

Beetle Bailey

By Daily Republic Syndicated Content | From Page: A6

 
B.C.

By Daily Republic Syndicated Content | From Page: A6

Dilbert

By Daily Republic Syndicated Content | From Page: A6

 
Get Fuzzy

By Daily Republic Syndicated Content | From Page: A6

Rose is Rose

By Daily Republic Syndicated Content | From Page: A6

 
Garfield

By Daily Republic Syndicated Content | From Page: A6

Baldo

By Daily Republic Syndicated Content | From Page: A6

 
Baby Blues

By Daily Republic Syndicated Content | From Page: A6

Sudoku

By Daily Republic Syndicated Content | From Page: A7

 
Word Sleuth

By Daily Republic Syndicated Content | From Page: A7

Cryptoquote

By Daily Republic Syndicated Content | From Page: A7

 
Crossword

By Daily Republic Syndicated Content | From Page: A7

Bridge

By Daily Republic Syndicated Content | From Page: A7

 
.

Home Seller 10/25/14

Real estate transactions for Oct. 25, 2014

By Daily Republic | From Page: HSR2