Monday, October 20, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Girl Scouts explore sweet side of chemistry

By Jess Sullivan | From Page: A1 | Gallery

 
Time again for my Cheers and Jeers

By Tony Wade | From Page: A2

Total Home, Garden & Harvest Festival wraps up

By Daily Republic staff | From Page: A3 | Gallery

 
Pumpkin Patch Festival set for final weekend

By Daily Republic staff | From Page: A3

 
Sessions teach about child support process

By Daily Republic staff | From Page: A3

Arrivederci! Italian Festival

By Daily Republic staff | From Page: A3 | Gallery

 
Red Kettle Program returns for holidays

By Daily Republic staff | From Page: A3

Holiday Fashion Extravaganza registration deadline looms

By Daily Republic staff | From Page: A3

 
Elder depression and substance abuse topic of discussion

By Daily Republic staff | From Page: A3

Vacaville library to host composting series

By Daily Republic staff | From Page: A3

 
Senior Center hosts monthly travel presentation

By Daily Republic staff | From Page: A3

Napa man jailed for running over ex-girlfriend

By Staff and wire reports | From Page: A4

 
Local governments schedule meetings

By Daily Republic staff | From Page: A4

Weather for Monday, Oct. 20, 2014

By Daily Republic staff | From Page: B12

 
.

US / World

Expelled Nazis paid millions in Social Security

By The Associated Press | From Page: A1

 
Cruise ship docks with Ebola-watched health worker

By The Associated Press | From Page: A1

Friends, family of Ebola patient reach milestone

By The Associated Press | From Page: A1

 
Obama switches gears, confronting Ebola head on

By The Associated Press | From Page: A1

CDC to revise Ebola protocol, Pentagon preps team

By The Associated Press | From Page: A1

 
California lottery sales top $5B for first time

By The Associated Press | From Page: A4

Archaeologists seek movie set in California sands

By The Associated Press | From Page: A4

 
The 10 semifinalists for World’s Funniest Person

By The Associated Press | From Page: A5

On the road to find the world’s funniest person

By The Associated Press | From Page: A5

 
New England raking in millions from leaf peepers

By The Associated Press | From Page: A6

Police hunt for clues near where Va. remains found

By The Associated Press | From Page: A6

 
Super drunk woman arrested, mistook jail for bar

By The Associated Press | From Page: A6

Robotic device helps paralyzed groom walk aisle

By The Associated Press | From Page: A6

 
Coroner: 6 fire victims died of smoke inhalation

By The Associated Press | From Page: A6

Pope beatifies Paul VI at remarkable synod’s end

By The Associated Press | From Page: A7

 
S. Korea: 2 Koreas exchange gunfire along border

By The Associated Press | From Page: A7

Sweden: 3 credible sightings in submarine search

By The Associated Press | From Page: A7

 
5 Things to Know about Pope Paul VI

By The Associated Press | From Page: A7

UN says Iraq has executed 60 people this year

By The Associated Press | From Page: A7

 
Marine accused in Philippine killing tests US ties

By The Associated Press | From Page: A9

.

Opinion

Is it truly affordable health care?

By Jim Mccully | From Page: A8

 
Suisun mayor offers his endorsements

By Letter to the Editor | From Page: A8

Which candidates support Alzheimer’s cure?

By Letter to the Editor | From Page: A8

 
Beware a Trojan horse

By Letter to the Editor | From Page: A8, 3 Comments

Pulse poll question

By Daily Republic | From Page: A8

 
Breaking news ‘facts’ worthy of note

By Jack Batson | From Page: A8

.

Living

Community Calendar: Oct. 20, 2014

By Susan Hiland | From Page: A2

 
Today in History: Oct. 20, 2014

By The Associated Press | From Page: A2

I’m too scared to leave my abusive husband of 15 years

By Kathy Mitchell and Marcy Sugar | From Page: B5

 
Horoscopes: Oct. 20, 2014

By Holiday Mathis | From Page: B5

 
Horoscopes: Oct. 21, 2014

By Holiday Mathis | From Page: B7

.

Entertainment

TVGrid Oct 20

By Daily Republic Syndicated Content | From Page: A10

 
TVGrid Oct 21

By Daily Republic Syndicated Content | From Page: A11

Comedians honor Jay Leno with humor prize in DC

By The Associated Press | From Page: A11

 
Report: Nashville songwriter Paul Craft dies at 76

By The Associated Press | From Page: A11

Reported ‘Easy Rider’ chopper sells at auction

By The Associated Press | From Page: A11

 
‘New Girl,’ ‘Cosmos’ win Environmental Media Award

By The Associated Press | From Page: A11

‘Letterman’ cue card man fired for colleague clash

By The Associated Press | From Page: A11

 
‘Fury’ blasts ‘Gone Girl’ from top of box office

By The Associated Press | From Page: A11

.

Sports

Manning breaks Favre’s TD mark in 42-17 win over 49ers

By The Associated Press | From Page: B1 | Gallery

 
Tim Lincecum waits his turn, still yet to pitch

By The Associated Press | From Page: B1 | Gallery

Keselowski keeps title hopes alive at Talladega

By The Associated Press | From Page: B1 | Gallery

 
Palmer leads Cardinals past Raiders 24-13

By The Associated Press | From Page: B1 | Gallery

Kings pick up G Ben McLemore’s option

By The Associated Press | From Page: B2

 
Rockets beat Warriors 90-83 in exhibition game

By The Associated Press | From Page: B2

Pacquiao makes professional basketball debut

By The Associated Press | From Page: B2

 
Cal receiver Trevor Davis released from hospital

By The Associated Press | From Page: B2

Sounders rally for 2-2 tie with LA Galaxy

By The Associated Press | From Page: B2

 
Rangers net 2 in 4 seconds; Lundqvist stops Sharks

By The Associated Press | From Page: B2 | Gallery

NFL roundup: Jaguars bounce Browns, gets first win

By The Associated Press | From Page: B2 | Gallery

 
SEC is 1st conference to put 4 in top 5 of AP poll

By The Associated Press | From Page: B2

Ski champ Svindal injured while playing soccer

By The Associated Press | From Page: B2

 
Serena Williams hits back at Russian official

By The Associated Press | From Page: B2

This date in sports history for Monday, Oct. 20, 2014

By The Associated Press | From Page: B3

 
Royals dependent on 3-headed bullpen monster

By The Associated Press | From Page: B8 | Gallery

 
Hend wins Hong Kong Open in a playoff

By The Associated Press | From Page: B9

Baek wins playoff to take LPGA South Korea

By The Associated Press | From Page: B9

 
Ilonen beats Stenson in World Match Play final

By The Associated Press | From Page: B9

Jay Haas wins Greater Hickory Kia Classic

By The Associated Press | From Page: B9

 
Ben Martin wins 1st PGA Tour title in Las Vegas

By The Associated Press | From Page: B9

Denkinger’s miss revisited as Series returns to KC

By The Associated Press | From Page: B9 | Gallery

 
.

Business

Facebook, Apple pay for egg freezing, sperm donors

By The Associated Press | From Page: A10

 
.

Obituaries

.

Comics

B.C. Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Peanuts Oct 20

By Daily Republic Syndicated Content | From Page: B4

Baby Blues Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Rose is Rose Oct 20

By Daily Republic Syndicated Content | From Page: B4

Dilbert Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Frank and Ernest Oct 20

By Daily Republic Syndicated Content | From Page: B4

Get Fuzzy Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Pickles Oct 20

By Daily Republic Syndicated Content | From Page: B4

Garfield October 20

By Daily Republic Syndicated Content | From Page: B4

 
Sally Forth Oct 20

By Daily Republic Syndicated Content | From Page: B4

Baldo Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Beetle Bailey Oct 20

By Daily Republic Syndicated Content | From Page: B4

Zits Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
Blondie Oct 20

By Daily Republic Syndicated Content | From Page: B4

Wizard of Id Oct 20

By Daily Republic Syndicated Content | From Page: B4

 
For Better or Worse Oct 20

By Daily Republic Syndicated Content | From Page: B4

Bridge Oct 20

By Daily Republic Syndicated Content | From Page: B5

 
Cryptoquote Oct 20

By Daily Republic Syndicated Content | From Page: B5

Crossword Oct 20

By Daily Republic Syndicated Content | From Page: B5

 
Word Sleuth Oct 20

By Daily Republic Syndicated Content | From Page: B5

Sudoku Oct 20

By Daily Republic Syndicated Content | From Page: B5

 
Dilbert Oct 21

By Daily Republic Syndicated Content | From Page: B6

Beetle Bailey Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
B.C. Oct 21

By Daily Republic Syndicated Content | From Page: B6

Frank and Ernest Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Blondie Oct 21

By Daily Republic Syndicated Content | From Page: B6

Garfield Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Get Fuzzy Oct 21

By Daily Republic Syndicated Content | From Page: B6

Baldo Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Pickles Oct 21

By Daily Republic Syndicated Content | From Page: B6

Rose is Rose Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Baby Blues Oct 21

By Daily Republic Syndicated Content | From Page: B6

For Better or Worse Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Sally Forth Oct 21

By Daily Republic Syndicated Content | From Page: B6

Zits Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Wizard of Id Oct 21

By Daily Republic Syndicated Content | From Page: B6

Peanuts Oct 21

By Daily Republic Syndicated Content | From Page: B6

 
Bridge Oct 21

By Daily Republic Syndicated Content | From Page: B7

Sudoku Oct 21

By Daily Republic Syndicated Content | From Page: B7

 
Crossword Oct 21

By Daily Republic Syndicated Content | From Page: B7

Word Sleuth Oct 21

By Daily Republic Syndicated Content | From Page: B7

 
Cryptoquote Oct 21

By Daily Republic Syndicated Content | From Page: B7