Data Security Breach for Target

The Target Corporation has undergone many changes due to the 2013 security breach where hackers stole personal information from credit and debit cards of at least 70 million customers. Target sales and reputation has dropped from this instance, thus eliciting changes in their security systems, changes in management, and a few policy changes in handling customer information. With the public eye on the corporation’s handling of the situation, Target has been communicating these changes through various means. The changes they needed to communicate were informing customers of the security breach, addressing the bad press coverage to shareholders, downsizing of employees, and

Linton (2011, p.44) stated that hacking of network of common users and attacking their personal computers is one of the most threatening problems at present. It is happening in every second that results in a loss in several ways like loss of credentials, personal information etcetera. Although the use of personal computers and the internet has been increased rapidly, numbers of users who are the expert and have good knowledge to tackle the matters are very rare. In addition, time, as well as required equipment to protect hacking, is also very.

Companies have an obligation to protect their customer’s information, which goes beyond that of complying with state and federal regulations. If the company loses the trust of their customers, they risk the chance of damaging

In December of 2013, target corporation faced a serious security breach where over 40 million credit cards were stolen from different target stores. This paper is going to explore the problem, the background information about the problem, the controls that could have been in place to prevent the issue, the intended plan of control and the associated risks involved.

The Security breach that hit Target in 2014 was one of the worst ever. It exposed names, addresses, phone numbers, credit and debit cards information’s of 70 million customers. Target informed that all transactions and customers’ information between Nov.27 to Dec. 15 2014 were stolen on the attack by hackers. This attack affect millions and the giant store as well losing money when their sales declined to 2.5 percent. Target had to email all affected customers and help all of them with their own credit monitoring by offering free credit monitoring and identity theft protection and also make them no liable to any fraudulent purchase after the breach. It was a big deal and it was all over the news. Two suggestions I would give is one, add a protocol

In December 2013, the CEO, Gregg Steinhafle, of Target announced that their company was affected by a data breach that occurred between November 27 and December 15, 2013. “Target disclosed that online thieves hacked into its computer system, stealing credit card or personal information from more than 100 million customers. Both personal data and credit card information may have been stolen from about 12 million people” (Abrams, 2014). The outcome of this breach has cost Gregg Steinhafle his job, as well as the trust of Target’s consumers, investors, and close to $150 million in breach-related costs. This breach is considered one of the largest retail data breaches in U.S. history due to the amount of personal data and credit card

Once Target released the breach to the public, sales dropped. The company attempted to attract skeptical customers to shop by offering a 10 percent discount on purchases in its stores the weekend before Christmas, but the damage to customer loyalty appeared in the latest sales figures. Target reportedly spent a significant amount of money on security technology (Capacio, 2014). Although systems used encryption, the encryption was presented ineffective because the data was entered in memory where it was unencrypted. For encryption to be effective, the company must hire a defense in depth strategy in which they can also defend the key and protect access to systems where the data needs to be unencrypted in order to be processed (Ferguson, Schneieir,

From November 27 to December 15, 2013 Target Corporation released 70 million customers’ personal information. On average, it takes companies 200 days to uncover they are being hacked (Lunden, 2015). It only took Target 12 days to figure out the crisis that began happening. On December 19, Target originally said only 40 million credit and debit card accounts may have been compromised during Black Friday weekend to December 15. “The information stolen included customer names, credit or debit card number, and the card’s expiration date and CVV” (McGrath, 2014). Although Target never clarified how they were hacked, security experts say that hackers targeted their POS system. “Target spent $61 million through Feb. 1 responding to the breach, according

Target a large retail corporation that operates over 1,700 stores across the United States. They also operate as an online retailer at target.com. In 2012 the retailer earned more than $73 billion dollars in revenue and grew their sales by 5.1% from the previous year. Looking at the revenue and sales growth rate it is hard to fathom that more money could not be spent to ensure that consumer data is protected as much as possible. As information security specialists one of the worst things that can happen is our network gets infiltrated and customer information is stolen. On December 19, 2013 Target released a statement stating that they have had an information

The Target data breach remains one of the most notable breaches in history, it was the first time a CEO of a major corporation was fired due to a security event. The breach received an enormous amount of attention, it caused corporations and individuals to change the way they think about information security and data protection. Between Thanksgiving and Christmas 2013 hackers gained access to 40 million customer credit cards and personal data of 70 million Target customers. The intruders slipped in by using stolen credentials and from there gained access to vulnerable servers on Targets network to launch their attack and steal sensitive customer data from the POS cash registers. All this occurred without a response from Targets security operations center, even though security systems notified them of suspicious activity. The data was then sold on the black market for an estimated $53 million dollars. However, the cost to Target, creditors, and banks exceeded half of a billion dollars. This report will review how the infiltration occurred, what allowed the breach to occur including Targets response, and finally who was impacted by the security event.

In December 2013, Target was attacked by a cyber-attack due to a data breach. Target is a widely known retailer that has millions of consumers flocking every day to the retailer to partake in the stores wonders. The Target Data Breach is now known as the largest data breach/attack surpassing the TJX data breach in 2007. “The second-biggest attack struck TJX Companies, the parent company of TJMaxx and Marshall’s, which said in 2007 that about 45 million credit cards and debit cards had been compromised.” (Timberg, Yang, & Tsukayama, 2013) The data breach occurred to Target was a strong swift kick to the guts to not only the retailer/corporation, but to employees and consumers. The December 2013 data breach, exposed Target in a way that many

After reading the article about the Target data security breach and how Target handled the PR, I agree with the author’s stance on how bad Target handled the PR of the data security breach. Target didn’t tell anyone about the data security breach even though they knew, instead someone else broke the story. Target did the opposite of the five principles of crisis communication, Target knew about the issue but wasn’t prepared to go public with it or communicate the issue with the press and other constituencies, and be honest to the public about what is going on. Instead, somebody else had to break the news. Also, Target wasn’t clear what it was doing to remedy the issue and didn’t mean it instead Target states the typical speech every company makes “we are taking this issue seriously”.

While all of these technologies have enabled exciting changes and opportunities for businesses, they have also created a unique set of challenges for business managers. Chief among all concerns about technology is the issue of information security. It seems to be almost a weekly occurrence to see a news article about yet another breach of security and loss of sensitive data. Many people will remember high profile data breaches from companies such as T.J Maxx, Boston Market, Sports Authority, and OfficeMax. In the case of T.J. Maxx, a data breach resulted in the loss of more than 45 million credit and debit card numbers. In many of these incidents, the root cause is a lack of adequate security practices within the company. The same technologies that enable managers can also be used against them. Because of this, businesses must take appropriate steps to ensure their data remains secure and their communications remain

Today, we live in a technologically based world in which almost everything we do is done through computer-based technology. Communication, marketing, and even transactions are all done through technology. The danger of having all of your information online is that once something is on the internet, it is permanent. Whether it be your home address, phone number, or simply pictures of you and your family, you can never really remove anything. This can be both positive and negative. Negative because if your information slips into the wrong hands you can get into trouble. And this can be positive because with all kinds of people around the world posting information on the internet, it brings everyone a little closer together, making it easier to connect with people from all over the globe. One negative effect of the internet making the world a smaller place was Target’s data breach a few years back. In mid-December of 2013, Target experienced a crisis when criminals had forced their way into Target’s system, gaining access to many guests credit and debit card information. As the investigation continued, it was later determined that certain guest information, such as names, mailing addresses, email addresses and phone numbers were taken as well. Target has built its reputation of customer satisfaction over the years by providing excellent service to customers and having better discounts than their competitors,

Prevalent to the current trend now is the dependency of the society on Information technology and communication systems. Every aspect of human life is one way or the other linked and controlled by information technology tools. The importance of information technology cannot be over emphasized as its unavailability could lead to a form of disaster or the other. Pivotal infrastructures like finance, healthcare, education and security are driven by information technology. However, information technology and its benefits are accompanied by vulnerabilities and risks that can be exploited by people with the necessary technical skills. Individuals like ‘Hackers’ and ‘Cyber Terrorist’ can cause disruption to information systems, commit financial fraud and also attack computers and networks. These attacks and disruptions could result to violence against people and properties. In some cases, death, serious injuries and severe economic loss could occur as a result of these attacks.