Skip to footer

Target data breach went on longer than previously thought

Target Corp. said Tuesday that an additional 25 cash registers infected by malicious software on were discovered on Dec. 18, when Target had said earlier that it had removed all the malware from its system three days earlier.

|
Pablo Martinez Monsivais/AP
From left, John J. Mulligan,Vice President and CFO of the Target Corporation; Michael R. Kingston; Delara Derakhshani, Policy Counsel Consumer Union; and Fran Rosch, Symantec Corporation are sworn-in on Capitol Hill in Washington, Tuesday, Feb. 4, 2014, prior to testifying before the Senate Judiciary Committee hearing on data breaches and combating cybercrime.
  • By Marcy Gordon AP Business writer

| Washington

An executive of Target Corp. said Tuesday the retailer has taken actions to shore up security following the massive breach of millions of consumers' data during the holiday season.

The testimony at a Senate hearing by John Mulligan, executive vice president and chief financial officer at the No. 2 U.S. discounter, also revealed that Target discovered an additional 25 cash registers infected by malicious software on Dec. 18. The company had said earlier that it had removed all the malware from its system by Dec. 15.

Mulligan's testimony before the Senate Judiciary Committee was the first public appearance by a Target executive addressing the issue since the breach that occurred between Nov. 27 and mid-December. An estimated 40 million credit and debit card accounts were affected.

Mulligan said Target is "deeply sorry" for the effect of the data theft on consumers, and he acknowledged that their confidence in the Minneapolis-based company has been shaken.

Sen. Patrick Leahy, D-Vt., the panel's chairman, said the erosion of consumers' confidence — with data breaches on the rise affecting retailers, Internet companies and others — could hinder the U.S. economy's recovery.

The recent data hackings at Target, luxury retailer Neiman Marcus and arts-and-crafts chain Michaels Stores "compromised the privacy and security of millions of consumers," Leahy said.

Senators pressed Mulligan and Michael Kingston, senior vice president and chief information officer at Neiman Marcus Group Inc., about how quickly they notified customers of the breaches.

Mulligan said Target executives were told on Dec. 12 by the Justice Department of suspicious activity involving payment cards. The company started an investigation, removed malware and publicly announced the data theft on Dec. 19.

A processing firm told Neiman Marcus of a problem on Dec. 13, and the company's investigators made a report on Jan. 2, Kingston said. Customers were notified on Jan. 10. The malware causing the breach appeared to have been operating in many Neiman Marcus stories between July and October, Kingston testified.

An estimated 1.1 million accounts were affected.

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
What is the Monitor difference? Tackling the tough headlines – with humanity. Listening to sources – with respect. Seeing the story that others are missing by reporting what so often gets overlooked: the values that connect us. That’s Monitor reporting – news that changes how you see the world.
editor@csmonitor.com
Subscribe
Mark Sappenfield
Editor

Dear Reader,

About a year ago, I happened upon this statement about the Monitor in the Harvard Business Review – under the charming heading of “do things that don’t interest you”:

“Many things that end up” being meaningful, writes social scientist Joseph Grenny, “have come from conference workshops, articles, or online videos that began as a chore and ended with an insight. My work in Kenya, for example, was heavily influenced by a Christian Science Monitor article I had forced myself to read 10 years earlier. Sometimes, we call things ‘boring’ simply because they lie outside the box we are currently in.”

If you were to come up with a punchline to a joke about the Monitor, that would probably be it. We’re seen as being global, fair, insightful, and perhaps a bit too earnest. We’re the bran muffin of journalism.

But you know what? We change lives. And I’m going to argue that we change lives precisely because we force open that too-small box that most human beings think they live in.

The Monitor is a peculiar little publication that’s hard for the world to figure out. We’re run by a church, but we’re not only for church members and we’re not about converting people. We’re known as being fair even as the world becomes as polarized as at any time since the newspaper’s founding in 1908.

We have a mission beyond circulation, we want to bridge divides. We’re about kicking down the door of thought everywhere and saying, “You are bigger and more capable than you realize. And we can prove it.”

If you’re looking for bran muffin journalism, you can subscribe to the Monitor for $15. You’ll get the Monitor Weekly magazine, the Monitor Daily email, and unlimited access to CSMonitor.com.

Subscribe to insightful journalism

QR Code to Target data breach went on longer than previously thought
Read this article in
https://www.csmonitor.com/Business/Latest-News-Wires/2014/0204/Target-data-breach-went-on-longer-than-previously-thought
QR Code to Subscription page
Start your subscription today
https://www.csmonitor.com/subscribe