Saturday, December 20, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Creche collection grows in size, popularity

By Amy Maginnis-Honey | From Page: A1 | Gallery

 
Handmade Christmas display is man’s labor of love

By Amy Maginnis-Honey | From Page: A1 | Gallery

 
 
 
Company competition a big win for charity

By Susan Hiland | From Page: A3 | Gallery

Meeting a great role model at any age

By Murray Bass | From Page: B5

 
Fairfield police log: Dec. 18, 2014

By Susan Hiland | From Page: A9

 
Suisun City police log: Dec. 18, 2014

By Susan Hiland | From Page: A9

Weather for Dec. 20, 2014

By Daily Republic | From Page: B12

 
.

US / World

Hospital to pay $2.2M to settle false claims

By The Associated Press | From Page: A3

 
Napolitano named as UC public policy professor

By The Associated Press | From Page: A3

Man shocked 20 times during jail booking sues

By The Associated Press | From Page: A3

 
Notorious California graffiti suspect arrested

By The Associated Press | From Page: A3

Island park in San Francisco Bay closed for weekend

By The Associated Press | From Page: A3

 
No harm caused by flames at Northern California refinery

By The Associated Press | From Page: A3

Wetter than usual start to new year in California predicted

By The Associated Press | From Page: A3

 
Animal rights activists take California rodeo to court

By The Associated Press | From Page: A4

California’s bullet train settles 1 of 7 lawsuits

By The Associated Press | From Page: A4

 
Tuskegee Airman Lowell Steward dies in California at 95

By The Associated Press | From Page: A4 | Gallery

Bush officials gave CIA wide latitude

By The Associated Press | From Page: A5

 
Theater shooter’s parents plead for his life

By The Associated Press | From Page: A5

Driver pleads not guilty in pedestrian deaths

By The Associated Press | From Page: A5

 
2012 movie massacre hung over ‘Interview’ decision

By The Associated Press | From Page: A6

Sony on shelving ‘The Interview': ‘We had no choice’

By The Associated Press | From Page: A6

 
Obama says North Korea hacked Sony, vows response

By The Associated Press | From Page: A6

AP Interview: Coelho says Sony hack threatens all

By The Associated Press | From Page: A6

 
5 ways to make your email safer in case of a hack attack

By The Associated Press | From Page: A6

Celebrities react to latest Sony hack developments

By The Associated Press | From Page: A6

 
Prepackaged caramel apples linked to 4 deaths

By The Associated Press | From Page: A10

Supreme Court won’t stop gay marriages in Florida

By The Associated Press | From Page: A10

 
Staples: Customer data exposed in security breach

By The Associated Press | From Page: A10

Lava could reach Hawaii shopping center in 8 days

By The Associated Press | From Page: A10

 
Jury rules for Indiana woman in firing over IVF

By The Associated Press | From Page: A10

Bergdahl investigation wraps up; top leaders get briefings

By The Associated Press | From Page: A10

 
Texas eatery worker gets mink coat from customer

By The Associated Press | From Page: A10

Sugarland, promoter settle with state fair victims

By The Associated Press | From Page: A10

 
NY police officer suspended after videotaped punch

By The Associated Press | From Page: A10

Franciscan religious order in ‘grave’ financial crisis

By The Associated Press | From Page: A11

 
Australian woman arrested in deaths of 8 children

By The Associated Press | From Page: A11

Israel carries out airstrike on Hamas site in Gaza

By The Associated Press | From Page: A11

 
Pakistan executes militants and bombards tribal areas

By The Associated Press | From Page: A11

.

Opinion

Yes, Virginia, the Santa wish list has gone digital

By Petula Dvorak | From Page: A8

 
Editorial Cartoon: Dec. 20, 2014

By Daily Republic Syndicated Content | From Page: A8

 
If you want to help the poor, fix the safety net

By Jim Tankersley | From Page: A8

.

Living

Community Calendar: Dec. 20, 2014

By Susan Hiland | From Page: A2

 
Today in History: Dec. 20, 2014

By The Associated Press | From Page: A2

Pampered pets that don duds move to the mainstream

By The Associated Press | From Page: B5

 
Children from wife’s first marriage put father’s ashes in coffin

By Kathy Mitchell and Marcy Sugar | From Page: B11

Horoscopes: Dec. 20, 2014

By Holiday Mathis | From Page: B11

 
.

Entertainment

More than 4 million people watched 1st dog telethon

By The Associated Press | From Page: A7

 
Kim Jong Un game spoof ‘Glorious Leader!’ moving forward

By The Associated Press | From Page: A7 | Gallery

Marathon bombing survivor in ‘Yes to Dress’ finale

By The Associated Press | From Page: A7

 
Kid Rock to perform pre-race concert at Daytona 500

By The Associated Press | From Page: A7

Actor Stephen Collins denies he’s a pedophile in interview

By The Associated Press | From Page: A7

 
.

Sports

Dodge, Vaca grad Mason lead Southern Oregon to NAIA title

By The Associated Press | From Page: B1

 
Raiders haven’t needed much from Janikowski

By The Associated Press | From Page: B1

 
AP sources: Peavy agrees on $24M, 2-year deal with Giants

By The Associated Press | From Page: B1

Rookie receivers making their mark in NFL

By The Associated Press | From Page: B2

 
Former boxing champ Ernie Terrell dies at 75

By The Associated Press | From Page: B2

Gold medalist Phelps pleads guilty to DUI, avoids jail time

By The Associated Press | From Page: B2

 
Dodgers end Yanks’ payroll streak, owe most tax

By The Associated Press | From Page: B2

FIFA will not reopen 2018 and 2022 World Cup votes

By The Associated Press | From Page: B2

 
Howe’s family reports rapid improvement

By The Associated Press | From Page: B2

2 Armstrong associates settle lawsuit with Landis

By The Associated Press | From Page: B2

 
Rays, Padres, Nats complete 11-player trade involving Myers

By The Associated Press | From Page: B2

Vanden girls open Nike TOC with win on Arizona

By Daily Republic staff | From Page: B2

 
Things to know about Friday’s baseball news

By The Associated Press | From Page: B2

Cal men beat Eastern Washington 78-67 for seventh straight win

By The Associated Press | From Page: B3

 
CIF football bowl games headed to Sacramento

By Daily Republic staff | From Page: B3

This date in sports history for Saturday, Dec. 20, 2014

By The Associated Press | From Page: B4

 
.

Business

California unemployment rate dips to 7.2 percent

By The Associated Press | From Page: B6

 
Chrysler gives in to gov’t, expands air bag recall

By The Associated Press | From Page: B6

T-Mobile paying at least $90M for unwanted services

By The Associated Press | From Page: B6

 
EPA sets first national standard for coal waste

By The Associated Press | From Page: B6

Sales for holiday shopping season comes down to the wire

By The Associated Press | From Page: B6 | Gallery

 
.

Obituaries

Dominic C. Scolaro

By Nancy Green | From Page: A4

 
Marian Kay Zutz

By Nancy Green | From Page: A4

Judy Zamora Rogers

By Susan Hiland | From Page: A4

 
.

Comics

Frank and Ernest

By Daily Republic Syndicated Content | From Page: B10

 
Zits

By Daily Republic Syndicated Content | From Page: B10

B.C.

By Daily Republic Syndicated Content | From Page: B10

 
For Better or Worse

By Daily Republic Syndicated Content | From Page: B10

Garfield

By Daily Republic Syndicated Content | From Page: B10

 
Baldo

By Daily Republic Syndicated Content | From Page: B10

Sally Forth

By Daily Republic Syndicated Content | From Page: B10

 
Peanuts

By Daily Republic Syndicated Content | From Page: B10

Pickles

By Daily Republic Syndicated Content | From Page: B10

 
Baby Blues

By Daily Republic Syndicated Content | From Page: B10

Get Fuzzy

By Daily Republic Syndicated Content | From Page: B10

 
Dilbert

By Daily Republic Syndicated Content | From Page: B10

Rose is Rose

By Daily Republic Syndicated Content | From Page: B10

 
Blondie

By Daily Republic Syndicated Content | From Page: B10

Beetle Bailey

By Daily Republic Syndicated Content | From Page: B10

 
Wizard of Id

By Daily Republic Syndicated Content | From Page: B10

Word Sleuth

By Daily Republic Syndicated Content | From Page: B11

 
Sudoku

By Daily Republic Syndicated Content | From Page: B11

Bridge

By Daily Republic Syndicated Content | From Page: B11

 
Cryptoquote

By Daily Republic Syndicated Content | From Page: B11

Crossword

By Daily Republic Syndicated Content | From Page: B11

 
.

Home Seller 12/20/14

Real estate transactions for Dec. 20, 2014

By Daily Republic | From Page: HSR2

Ask a Designer: decorating with Christmas trees

By The Associated Press | From Page: HSR2