Tuesday, March 3, 2015
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Hackers may have used Pa. company to hit Target

By
February 08, 2014 |

NEW YORK — The hackers who stole millions of customers’ credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.

If that was, in fact, how they pulled it off — and investigators appear to be looking at that theory — it illustrates just how vulnerable big corporations have become as they expand and connect their computer networks to other companies to increase convenience and productivity.

Fazio Mechanical Services Inc., a contractor that does business with Target, said in a statement Thursday that it was the victim of a “sophisticated cyberattack operation,” just as Target was. It said it is cooperating with the Secret Service and Target to figure out what happened.

The statement came days after Internet security bloggers identified the Sharpsburg, Pa., company as the third-party vendor through which hackers penetrated Target’s computer systems.

Target has said it believes hackers gained access to its vast computer network through one of its vendors. Once inside, the hackers installed malicious software in Target’s checkout system for its estimated 1,800 U.S. stores.

Experts believe the thieves gained access during the busy holiday season to about 40 million debit and credit card numbers and the personal information — including names, email addresses, phone numbers and home addresses — of as many as 70 million customers.

Cybersecurity analysts had speculated that Fazio may have remotely monitored heating, cooling and refrigeration systems for Target, which could have provided a possible entry point for the hackers. But Fazio denied that, saying it uses its electronic connection with Target to submit bills and contract proposals.

The new details illustrate what can go wrong with the far-flung computer networks that big companies increasingly rely on.

“Companies really have to look at the risks associated with that,” said Ken Stasiak, CEO of SecureState, a Cleveland firm that investigates data breaches. Stasiak added that industry regulations require companies to keep corporate operations such as contracts and billing separate from consumer financial information.

Stasiak emphasized that the thieves would have still needed to do some serious hacking to move through Target’s computer network and reach the checkout system.

Chester Wisniewski, senior security adviser for the computer security firm Sophos, said that while it may seem shocking that Target’s systems are that connected, it is a lot cheaper for a company to manage one network rather than several.

He added that while retailers are supposed to keep consumer information separate, they are not required to house it on a separate network.

Still, he said he was extremely surprised to hear that the hackers may have gotten in via a billing system, saying those kinds of connections are supposed to provide extremely limited access to the other company’s network.

As a result, while the hackers were clearly talented, it’s obvious something went wrong on Target’s end, he said.

“If normal practices were followed, they wouldn’t have been able to get access,” Wisniewski said.

Secret Service spokesman Brian Leary confirmed that investigators are looking into the attack at Fazio Mechanical Services, but wouldn’t provide details. Molly Snyder, spokeswoman for Minneapolis-based Target, would not comment.

Federal prosecutors in Pittsburgh referred calls to their counterparts in Minnesota, who would not discuss the investigation.

In the weeks since Target disclosed the breach, banks, credit unions and other card companies have canceled and reissued cards, closed accounts and refunded credit card holders for transactions made with the stolen data.

The Consumer Bankers Association said that its members have replaced over 17.2 million debit and credit cards as a result of the Target breach, at a cost of over $172 million.

Target has said its customers won’t be responsible for any losses.

Maureen Fissolo

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

 
 
Fairfield police seek help to ID injured bicyclist

By Jess Sullivan | From Page: A5

 
College looks at Measure Q project changes

By Susan Winlow | From Page: A5

 
Robots, raucous businessmen set to arrive on big screen

By Amy Maginnis-Honey | From Page: A7

Bridge work to shut down Highway 12 east of Rio Vista

By Kevin W. Green | From Page: A5

 
Caltrans reschedules work on J-Mack Ferry

By Kevin W. Green | From Page: A5

 
Highway 12 Association to meet this month

By Kevin W. Green | From Page: A5

 
State schedules work on Highway 12

By Kevin W. Green | From Page: A5

.

US / World

GOP vote to endorse gay group is momentous but incremental

By The Associated Press | From Page: B2

 
Netanyahu assails Iran deal, touts US-Israel ties

By The Associated Press | From Page: B2 | Gallery

 
‘Naty’ Revuelta, who had daughter with Fidel Castro, dies

By The Associated Press | From Page: B2

Pakistan police arrest parents refusing kids’ polio vaccine

By The Associated Press | From Page: B2

 
UN warns against complacency as Ebola fight enters new phase

By The Associated Press | From Page: B2

Iraq launches operation to retake Tikrit from Islamic State

By The Associated Press | From Page: B2

 
Woman with slain Putin critic says she didn’t see his killer

By The Associated Press | From Page: B2

Storms bring up nearly 3 feet of snow to Lake Tahoe

By The Associated Press | From Page: B2

 
4 people killed, 4 others injured in California car crash

By The Associated Press | From Page: B2

 
Federal study: Foster kids struggle to get health screenings

By The Associated Press | From Page: B2

 
Mom convicted of killing son, 5, by poisoning him with salt

By The Associated Press | From Page: B2

Well-liked photo teacher found dead in California classroom

By The Associated Press | From Page: B2

 
Budget standoff leaves California college hopefuls in limbo

By The Associated Press | From Page: B2

 
Police chief: Man killed on Skid Row reached for gun

By The Associated Press | From Page: B2, 2 Comments | Gallery

Military judge orders overseer of Gitmo cases replaced

By The Associated Press | From Page: B2

 
Snowy Boston starts removing parking-space savers

By The Associated Press | From Page: B2 | Gallery

 
.

Opinion

Israelis worry about inequality, not Iran

By Daniel Gordis | From Page: A11, 1 Comment

 
Editorial cartoon: March 3-4, 2015

By Daily Republic Syndicated Content | From Page: A11

Minority outreach that works

By Jennifer Rubin | From Page: A11, 1 Comment

 
.

Living

.

Entertainment

Sara Gilbert welcomes baby boy with wife Linda Perry

By The Associated Press | From Page: B3

 
Judge: CeeLo Green in compliance with probation in drug case

By The Associated Press | From Page: B3

 
Clive Owen to make Broadway debut in Pinter’s ‘Old Times’

By The Associated Press | From Page: B3

 
Television’s ‘Judge Judy’ staying in session

By The Associated Press | From Page: B3

Pop channel bringing Daytime Emmys ceremony back to TV

By The Associated Press | From Page: B3

 
Julianne and Derek Hough to hit the road again this summer

By The Associated Press | From Page: B3 | Gallery

Ming-Na Wen: ‘S.H.I.E.L.D.’ role makes me a cool mom

By The Associated Press | From Page: B3

 
TVGrid March 3

By Daily Republic Syndicated Content | From Page: B11

.

Sports

NASCAR falls flat in follow-up to Daytona 500

By The Associated Press | From Page: B1

 
Mayweather and Pacquiao to meet only once before fight week

By The Associated Press | From Page: B1

Michael Schumacher’s son to drive in Formula 4

By The Associated Press | From Page: B1

 
UConn still No. 1 in women’s basketball poll

By The Associated Press | From Page: B1

Kurt Busch to follow guidelines toward NASCAR reinstatement

By The Associated Press | From Page: B1

 
Harrington wins the Honda Classic in a playoff

By The Associated Press | From Page: B1 | Gallery

 
Curt Schilling fires back after offensive Twitter posts

By The Associated Press | From Page: B1

Wild week leads to changes across AP Top 25 poll

By The Associated Press | From Page: B1

 
New Browns QB McCown barely knows Manziel

By The Associated Press | From Page: B1

Jordan, other NBA owners join Forbes’ billionaire list

By The Associated Press | From Page: B1

 
NFL salary cap increases $10 million to top $143 million

By The Associated Press | From Page: B1

A’s switch-pitcher hopes to find spot with Oakland

By The Associated Press | From Page: B1 | Gallery

 
Sharks trade Desjardins to Blackhawks for Smith

By The Associated Press | From Page: B1 | Gallery

.

Business

Buffett declines to clarify plan to eventually replace him

By The Associated Press | From Page: B4

 
US consumer spending, adjusted for inflation, rose in Jan.

By The Associated Press | From Page: B4

Ikea launches furniture with inbuilt wireless chargers

By The Associated Press | From Page: B4

 
Google, Facebook update contrasting plans to connect world

By The Associated Press | From Page: B4

Minimum wage in 1 Oakland jumps

By The Associated Press | From Page: B4

 
PayPal to acquire mobile wallet provider Paydient

By The Associated Press | From Page: B4

Costco strikes credit card deal with Citi, Visa

By The Associated Press | From Page: B4, 2 Comments

 
Bill Gates repeats at top of Forbes’ list of billionaires

By The Associated Press | From Page: B4 | Gallery

HP’s big deal: Tech giant buys Aruba Networks for $2.7B

By The Associated Press | From Page: B4

 
Next Google Maps adventure: Soaring through Amazon jungle

By The Associated Press | From Page: B4

Dot-com deja vu: Nasdaq tops 5,000, approaching record high

By The Associated Press | From Page: B4

 
.

Obituaries

.

Comics

Wizard of Id March 3

By Daily Republic Syndicated Content | From Page: B4

 
Peanuts March 3

By Daily Republic Syndicated Content | From Page: B4

Baby Blues March 3

By Daily Republic Syndicated Content | From Page: B4

 
Baldo March 3

By Daily Republic Syndicated Content | From Page: B4

Garfield March 3

By Daily Republic Syndicated Content | From Page: B4

 
Get Fuzzy March 3

By Daily Republic Syndicated Content | From Page: B4

Cryptoquote March 3

By Daily Republic Syndicated Content | From Page: B5

 
Frank and Ernest March 3

By Daily Republic Syndicated Content | From Page: B4

Word Sleuth March 3

By Daily Republic Syndicated Content | From Page: B5

 
Bridge March 3

By Daily Republic Syndicated Content | From Page: B5

Dilbert March 3

By Daily Republic Syndicated Content | From Page: B4

 
Beetle Bailey March 3

By Daily Republic Syndicated Content | From Page: B4

Blondie March 3

By Daily Republic Syndicated Content | From Page: B4

 
For Better or Worse March 3

By Daily Republic Syndicated Content | From Page: B4

Pickles March 3

By Daily Republic Syndicated Content | From Page: B4

 
Crossword March 3

By Daily Republic Syndicated Content | From Page: B5

B.C. March 3

By Daily Republic Syndicated Content | From Page: B4

 
Rose is Rose March 3

By Daily Republic Syndicated Content | From Page: B4

Sudoku March 3

By Daily Republic Syndicated Content | From Page: B5

 
Zits March 3

By Daily Republic Syndicated Content | From Page: B4

Sally Forth March 3

By Daily Republic Syndicated Content | From Page: B4