Sunday, September 21, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

County makes recommendations for crude-by-rail

By Barry Eberling | From Page: A1, 2 Comments | Gallery

 
Hartley House offers look into Vacaville’s past

By Amy Maginnis-Honey | From Page: C1 | Gallery

 
Coastal Cleanup helps get rid of trash in area

By Susan Hiland | From Page: A3, 1 Comment | Gallery

Travis teachers bring creativity to Shakespeare

By Susan Winlow | From Page: A3

 
Olympians to participate in swim Lap-a-Thon

By Amy Maginnis-Honey | From Page: A3

Circle of Friends director to speak in Fairfield

By Amy Maginnis-Honey | From Page: A3

 
Be alert to stroke warning signs

By Marilyn Ranson | From Page: C4

Recovery community works for lifelong sobriety

By Amy Maginnis-Honey | From Page: A4 | Gallery

 
Musical merry-go-round at Jazz Festival

By Amy Maginnis-Honey | From Page: A5 | Gallery

Deadline looms for lobster boil tickets

By Glen Faison | From Page: A5

 
 
Seven Artisans opens tasting room

By Barry Eberling | From Page: B7 | Gallery

BABA makes big spash

By Bud Stevenson | From Page: B7

 
Old Kmart site sees signs of new life

By Brian Miller and Karl Dumas | From Page: B8, 38 Comments | Gallery

 
Airmen with local ties finish basic training

By Nick DeCicco | From Page: B10

Fairfield police log: Sept. 19, 2014

By Susan Hiland | From Page: A12

 
Suisun City police log: Sept. 19, 2014

By Susan Hiland | From Page: A12

.

US / World

Potential push for Obama to expand military effort

By The Associated Press | From Page: A1, 1 Comment

 
Teams assess damage as California wildfire burns

By The Associated Press | From Page: A1

McInerney, Duka help Impact beat Earthquakes

By The Associated Press | From Page: B3

 
Old pets, new chances: The case for senior adoption

By Mcclatchy-Tribune News Service | From Page: C4

Jailed, some mentally ill inmates land in lockdown

By The Associated Press | From Page: A6

 
Custer youngest winner at 16 in NASCAR series

By The Associated Press | From Page: B6 | Gallery

Retro-hip barber is growing an ‘empire’ by staying on the cutting edge

By Mcclatchy-Tribune News Service | From Page: C6

 
Tense hunt in trooper ambush case hits 8 days

By The Associated Press | From Page: A7

Tour ship runs aground by NYC’s Statue of Liberty

By The Associated Press | From Page: A7

 
Astronauts getting 3-D printer at space station

By The Associated Press | From Page: A10 | Gallery

Chrysler recalling nearly 189,000 SUVs

By The Associated Press | From Page: A10, 1 Comment

 
Fire captain injured in ice bucket challenge dies

By The Associated Press | From Page: A10, 1 Comment

More than 1K people search for missing UVa student

By The Associated Press | From Page: A10

 
Second man arrested trying to enter White House

By The Associated Press | From Page: A10

Pope chooses a moderate for Chicago archbishop

By The Associated Press | From Page: A10, 4 Comments | Gallery

 
Turkish hostages freed, but questions linger

By The Associated Press | From Page: A11

Sierra Leone staggers in Ebola isolation effort

By The Associated Press | From Page: A11 | Gallery

 
El-Sissi ready to back anti-IS fight

By The Associated Press | From Page: A11 | Gallery

NATO chief: Ukraine has cease-fire ‘in name only’

By The Associated Press | From Page: A11

 
Kurdish fighters head to Syria to face militants

By The Associated Press | From Page: A11

Polly Bergen, versatile actress, singer dies at 84

By The Associated Press | From Page: A12

 
.

Opinion

Stores miss bus on public transit

By Letter to the Editor | From Page: A8, 12 Comments

 
Sunset Animal Hospital is the best

By Letter to the Editor | From Page: A8

Sound off for Sept. 21, 2014

By Daily Republic | From Page: A8

 
New car’s fuel mileage accuracy put to the test

By Glen Faison | From Page: A8

 
 
Will they ever get the message?

By Rod Keck | From Page: A9, 8 Comments

 
.

Living

Community Calendar: Sept. 21, 2014

By Susan Hiland | From Page: A2

 
Today in History: Sept. 21, 2014

By The Associated Press | From Page: A2

There is no message of hatred of violence in Christianity

By The Rev. Rick L. Stonestreet | From Page: C3, 7 Comments

 
St. Paul pastor’s pulpit? A food truck

By The Associated Press | From Page: C3 | Gallery

Horoscopes: Sept. 21, 2014

By Holiday Mathis | From Page: C4

 
My child’s father and I worked things out – but now I’m not so sure

By Kathy Mitchell and Marcy Sugar | From Page: C4

.

Entertainment

Springsteen picture book out in November

By The Associated Press | From Page: C2

 
Erdrich wins lifetime achievement literary prize

By The Associated Press | From Page: C2

Designer Donna Karan memoir expected next year

By The Associated Press | From Page: C2

 
PUBLISHERS WEEKLY BEST-SELLERS

By The Associated Press | From Page: C2

Author says Christian novel plagiarized, sex added

By The Associated Press | From Page: C2 | Gallery

 
TVGrid

By Daily Republic Syndicated Content | From Page: B11

.

Sports

Patriots big favorites vs. Raiders despite mediocre start

By The Associated Press | From Page: B1 | Gallery

 
Williams beats A’s for third time with third team

By The Associated Press | From Page: B1 | Gallery

Cardinals look to shake off distraction vs. 49ers

By The Associated Press | From Page: B1 | Gallery

 
Cashner, Padres beat Giants 3-2

By The Associated Press | From Page: B1

Prep boys soccer preview: Indians, Vikings off to fast start

By Paul Farmer | From Page: B1 | Gallery

 
Schumacher, Hagan win rain-delayed Carolina event

By The Associated Press | From Page: B3

College football Top 25

By The Associated Press | From Page: B3

 
No. 1 Florida St survives against No. 22 Clemson

By The Associated Press | From Page: B3 | Gallery

Sprint car driver killed in Wisconsin

By The Associated Press | From Page: B3

 
Vacaville Christian volleyball team falls in playoffs

By Daily Republic staff | From Page: B3

Mi Jung Hur, Paula Reto share lead in Alabama

By The Associated Press | From Page: B4 | Gallery

 
Stars Recreation results

By Daily Republic | From Page: B4

Estimated 7,000 fans trade in Ray Rice jerseys

By The Associated Press | From Page: B4 | Gallery

 
Travis Bowl results

By Daily Republic | From Page: B4

This date in sports history for Sunday, Sept. 21, 2014

By The Associated Press | From Page: B5

 
Sports on TV for Sunday, Sept. 21, 2014

By Paul Farmer | From Page: B5

Harvick dismisses wins as key to Cup title

By The Associated Press | From Page: B6 | Gallery

 
Gaughan snatches Nationwide win at Kentucky

By The Associated Press | From Page: B6 | Gallery

.

Business

Extended warranties a big sell. Are they worth it?

By The Associated Press | From Page: B7 | Gallery

 
Recalls this week: fire alarm bases, swings

By The Associated Press | From Page: B8

US tobacco growers brace for tougher competition

By The Associated Press | From Page: B12 | Gallery

 
Marijuana industry battling stoner stereotypes

By The Associated Press | From Page: B12 | Gallery

.

Obituaries

George Junior Rhode

By Nancy Green | From Page: A4

 
.

Comics