Major Data Breach at Target Stores

[Mousey]

You do not have permission to view link Log in or register now.

Target says that about 40 million credit and debit card accounts may have been affected by a data breach that occurred just as the holiday shopping season shifted into high gear.

The chain said that accounts of customers who made purchases using their cards at its U.S. stores between Nov. 27 and Dec. 15 may have been exposed. The stolen data includes customer names, credit and debit card numbers, card expiration dates and the three-digit security codes located on the backs of cards.

 

[P.V.]

Target CEO promises to make 'significant changes' after huge data breach

The head of retail powerhouse Target is pledging to "make significant changes" in the wake of the latest revelation that as many as 110 million customers were ensnared in a massive data heist at stores across the country.

You do not have permission to view link Log in or register now.

 

[vinylweatherman]

So, they didn't see this happening to other businesses, so waited for it to hit them before bothering to make the necessary changes. Do all businesses think like this?

If they do, then the safest place to shop is one that has already been hacked and then tightened up their security. The others with the "It'll never happen to us" attitude are the "ticking timebombs" as far as customers are concerned.

Is it NECESSARY for these businesses to store so much personal data that can be accessed from over the internet? Surely, we choose our item, pay up, they deliver it, and it's over, no need for any of this data to remain "live" to the internet any longer.

 

[Nifty29]

So, they didn't see this happening to other businesses, so waited for it to hit them before bothering to make the necessary changes. Do all businesses think like this?

If they do, then the safest place to shop is one that has already been hacked and then tightened up their security. The others with the "It'll never happen to us" attitude are the "ticking timebombs" as far as customers are concerned.

Is it NECESSARY for these businesses to store so much personal data that can be accessed from over the internet? Surely, we choose our item, pay up, they deliver it, and it's over, no need for any of this data to remain "live" to the internet any longer.

I don't know if it's part of the issue at hand, but many stores ask you to create an "account" before you purchase, and you then add items to your "cart" before you "checkout".

Usually, you are required to register a payment method, which is saved for future purchases....so this would have to be stored somewhere I guess. I also assume they would have to save the CC details to match up for accounting purposes, and even for disputes etc.

It's one of the drawbacks of "faceless" shopping in "shopless" stores.

 

[vinylweatherman]

I don't know if it's part of the issue at hand, but many stores ask you to create an "account" before you purchase, and you then add items to your "cart" before you "checkout".

Usually, you are required to register a payment method, which is saved for future purchases....so this would have to be stored somewhere I guess. I also assume they would have to save the CC details to match up for accounting purposes, and even for disputes etc.

It's one of the drawbacks of "faceless" shopping in "shopless" stores.

Maybe they save too much. Data has to be stored, but surely it should be stored offline so that even the best hacker can't get at it. I suspect that these hacks target the "online accounts" database, and find a way to dump all the account details as a data stream, so whatever a customer has stored in their account becomes available to the hacker. If the three digit security code of the card is also stored and retrieved, the hacker can use these cards straight away. Even without this, they have the mailing address that matches the card number, making fraud much easier. Sites that don't store payment details are likely to be safer than those that do.

 

[slotplayer]

It was only in b&m Target stores, not online.

The news said this morning some mal-ware was installed on the pos (point of sale) system.

Also Neiman Marcus said they were breached.

I don't know if it's part of the issue at hand, but many stores ask you to create an "account" before you purchase, and you then add items to your "cart" before you "checkout".

I have some retail sites but I don't store any customer's finanacial data, its all done at the processor.
I recommend doing a guest check out if possible.

To be honest these casino affiliate programs are the worst at data security.
I got hacked back 2008 and went through all the programs, it was so bad, even the pw and security question didn't have the asterisks.
I emailed them all and most just dismissed it, except CR which had the better security measures in place. The Rival programs were the worst, but they have cleaned it up since then.

 

[Casinomeister]

This just in:

From Target

As you may have heard or read, Target learned in mid-December that criminals forced their way into our systems and took guest information, including debit and credit card data. Late last week, as part of our ongoing investigation, we learned that additional information, including name, mailing address, phone number or email address, was also taken. I am writing to make you aware that your name, mailing address, phone number or email address may have been taken during the intrusion.

I am truly sorry this incident occurred and sincerely regret any inconvenience it may cause you. Because we value you as a guest and your trust is important to us, Target is offering one year of free credit monitoring to all Target guests who shopped in U.S. stores, through Experian’s® ProtectMyID® product which includes identity theft insurance where available. To receive your unique activation code for this service, please go to creditmonitoring.target.com and register before April 23, 2014. Activation codes must be redeemed by April 30, 2014.

In addition, to guard against possible scams, always be cautious about sharing personal information, such as Social Security numbers, passwords, user IDs and financial account information. Here are some tips that will help protect you:

• Never share information with anyone over the phone, email or text, even if they claim to be someone you know or do business with. Instead, ask for a call-back number.
• Delete texts immediately from numbers or names you don’t recognize.
• Be wary of emails that ask for money or send you to suspicious websites. Don’t click links within emails you don’t recognize.

Target’s email communication regarding this incident will never ask you to provide personal or sensitive information.
Thank you for your patience and loyalty to Target. You can find additional information and FAQs about this incident at our Target.com website. If you have further questions, you may call us at 866-852-8680.

One of my Mastercards was cancelled by the bank because it was used at Target during this time period.

 

[secret2]

You know?,.. the other thing about stores is that you can link your discount store card to a credit or debit card and it is a huge NO for me. I see quite a few key-ring discount cards (the ones that you can add on to your car, home and other key ring) on the street.

I have handed in quite a few that I found on the ground to CS at the store.

Pay cash, if you can and don't swipe.

Just my 2 cents.

 

[Perc]

I didn't do any shopping at Target, and apparently Canadian Target stored weren't affected anyway, but someone got my info from somewhere around the same time.

A few days before Christmas I checked my credit card online (like I usually do every day, just in case) and someone had called in to Westjet and bought a ticket for a flight with my credit card. The ticket was bought earlier in the day for a flight that night, so if I hadn't checked at the time I did, he/she would have been long gone. I managed to get the flight cancelled, but it didn't sound like they could do much about the person that was trying to fly (may not have been the same person that called in the purchase).

Wesjet said it happens quite often, they always buy the tickets the same day as the flight, and most people don't find out until they get their statement in the mail. So check your credit card statements online often, I'm glad I did. I know I wouldn't have had to actually pay for it, but I was happy to screw his/her plans of flying across the country on my card. It also stopped that person from being able to use a credit card, or fly with Westjet using tickets bought with a credit card, in the future.

 

[jetset]

My confidence in the security of credit cards has been shattered by two incidences over the past two years where some bastard/s - one in a neighbouring country I haven't visited in decades - bought stuff or drew cash using my credit card details.

I am very careful of where and how I use my c/c and do so only sparingly. Likewise, I guard my PIN and change it from time to time. And like Perc I don't wait for statements to arrive - I check regularly online and I've activated the bank's service which sends details of any significant transactions instantaneously to my email and cellphone.

In the latest case, as soon as that notification landed on my cellphone I called the bank's fraud line, but in just a few minutes these crooks had taken out cash to the value of the daily limit I have imposed on my c/c.

The bank immediately and without argument reversed the transactions, so I suffered no prejudice...but in both cases I have yet to receive a satisfactory explanation as to how a "card holder not present" transaction can go through without the PIN number or the number on the reverse of the card!

Credit cards may be convenient, but my experiences have convinced me that they are not really secure, and you have to be careful in their use.

 

[Mousey]

POS terminals have been known to be vulnerable for years, yet they continue in use. I always preferred using an old fashioned paper check at the local groceries and WallyWorld, but since even that info is now immediately and electronically transmitted (they verify and accept the check and hand you the darn check back), checks are no more 'safe' from electronic theft than swiped debit or credit cards.

 

[skiny]

I really don't do a hell of a lot of CC purchasing. I usually keep enough cash in my pocket to do cover my day to day expenses so I don't even debit very often but it sure seems like no matter what method you use to spend your money someone else is waiting around for a chance to steal it.

Funnily enough with the amount of time I spend sitting in front of a computer either gambling or gaming or creating 3d animations or programming, I'm about the slowest person I know to accept and use today's available technology. I don't even carry a cell PHONE. Remember the ones that people used to dial and talk on? I certainly don't need one of these PDAs. I shopped online one time in my life. Midway through my two week wait to receive my purchase I thought "Well, this is bullshit."

I like to walk into a store. Hold what I'm buying in my hand and pay for it with cash provided it's not something terribly expensive and then carry it straight home. I guess I'm just old fashion.

Speaking of old fashion, wasn't there a time when people used to be able to figure out how much change to give you when you handed them a bill? I made a purchase for $3.85 a couple of days ago and handed the guy a 10 dollar bill. There was a delay after the cash drawer opened for the change due to appear on the screen and for that 2 or 3 seconds before the amount I was supposed to be returned to show up he just stared into the drawer like it was a foreign currency. I said "Seriously?" Why are we hiring people to handle our money that can't do simple math? This is the problem with today's technology. It makes us lazy and stupid.

Oh, yeah. And it makes us vulnerable to credit card theft.

 

[Mousey]

speaking of card data theft --

You do not have permission to view link Log in or register now.

On Tuesday, 13 men were charged in a case involving Bluetooth-enabled data skimmers planted on gas station pumps. The hackers allegedly made more than $2 million by downloading ATM information from the gas pumps, and then using that data to withdraw cash from ATMs in Manhattan.

According to Manhattan District Attorney Cyrus R. Vance, the suspects used credit card skimming devices that were Bluetooth-enabled and internally installed on pumps at Raceway and Racetrac gas stations throughout Texas, Georgia, and South Carolina. Because of this configuration, the skimmers were invisible to people who paid at the pumps, and later, the suspects were able to download the skimmed data without physically removing the devices.....

 

[jetset]

I really hope they put these guys away for a long time - deliberately planning the theft of someone else's hard-earned cash and then executing that plan is not cool.