70 Milion Records Exposed in Target Breach

This week Target disclosed that the breach from last December actually impacted records from 70 to 110 million people, including names, mailing addresses, phone number and email addresses. Originally, Target report the exposure of up to 40 millions debit and credit card records. This updated estimate reflects Target’s ongoing investigation.

The company website formally posted an update yesterday, disclosing that the problem is more widespread than previously thought. Target writes,

As part of Target’s ongoing forensic investigation, it has been determined that certain guest information—separate from the payment card data previously disclosed—was taken from Target. This theft is not a new breach, but was uncovered as part of the ongoing investigation. At this time, the investigation has determined that the stolen information includes names, mailing addresses, phone numbers or email addresses for up to 70 million individuals. [1]

This recent disclosure indicates that the data breach from many records was only partial in nature. If Target has an email address, they have committed to contact guests that were impacted. They set up a data breach website with details about this breach as well as credit tips (see Responses and Resources Related to Target’s Data Breach). Additionally, they are offering guests up to one year of free credit monitoring for all Target guests (see Free Credit Monitoring).

The impact of this breach is far reaching. “This will impact many Target business partners — Visa, MasterCard and the host of banks and credit agencies that now have to keep an eye on the 110 million customers now vulnerable to identity theft,” said Hemu Nigam, founder of SSP Blue, a security and privacy consulting firm. “It affects more than Target customers. It affects mortgage lenders and car sales. It affects the entire economic infrastructure.”

Even if sensitive data like social security numbers have not been exposed, hackers may still try to get that data as well as money and information via targeted phishing attacks that utilize the data that was stolen. Hackers could use this information to convince victims that emails are coming from a valid business, bank or friend. In turn, they may be able to steal money and more data. The full impact of this breach will only be realized in the days and months ahead.

[1] An Update on our Data Breach and Financial Performance. Target.com, January 10, 2014

The post 70 Milion Records Exposed in Target Breach appeared first on Integracon Technologies Blog – Computer Support in Knoxville, TN.