Skip to main content

Vendor linked to Target breach: 'We are a victim of a sophisticated cyber attack'

  • Author:
  • Updated:
    Original:

A Pennsylvania refrigeration, heating and air conditioning company that was linked to the massive Target data breach earlier this week confirmed it was also a victim of a "cyber attack."

Security blogger Brian Krebs called out Fazio Mechanical Services Inc. of Sharpsburg on Wednesday, saying the hackers who snatched personal and financial information belonging to millions of Target shoppers gained access to Target's network using credentials stolen from Fazio.

"Like Target, we are a victim of a sophisticated cyber attack operation," Ross Fazio, Fazio's president and owner, said in a written statement. "We are fully cooperating with the Secret Service and Target to identify the possible cause of the breach and to help create proactive initiatives that will further enhance the security of client/vendor connections making them less vulnerable to future breaches."

The subcontractor worked at a number of Target locations and other top retailers, according to Krebs. An anonymous cyber security expert told Krebs that it is common for large retail operations to have a team that monitors energy consumption and temperatures in stores. To do this, "vendors need to be able to remote into the system," the expert said.

However, Fazio said it does not perform remote monitoring or control heating, cooling and refrigeration systems for Target.

"Our data connection with Target was exclusively for electronic billing, contract submission and project management," Fazio said.

The company says no other customers have been affected by the breach.

The U.S. Secret Service has confirmed an investigation into Fazio, but wouldn't provide further details, the Associated Press reports. Minneapolis-based Target and the U.S. Attorney's Office also declined to comment.

Next Up

Melvin Carter

What's in Mayor Melvin Carter's budget proposal?

Here's what the St. Paul mayor is putting his focus on for the upcoming year.

WCCO building

Digital, streaming employees at WCCO-TV vote to unionize

The 15 employees will join on-air talent and producers as members of the SAG-AFTRA union.

unnamed-3

Police arrest man suspected of sexual assault, weapons threat in Eagan

The investigation prompted a SWAT response in an Eagan neighborhood on Tuesday.

covid

Minnesota's COVID-19 update for the week ending Tuesday, August 16

The latest reporting period averaged just under 1,300 new cases per day.

USATSI_12923669

Jason and Carly Zucker sell Edina home for $4.18M

The property was bought in 2020, months after Jason Zucker was traded to the Pittsburgh Penguins.

Legacy Lot Random (1 of 6)

Gallery: Luxury living is par for the course here

Cragun’s Golf Resort Communities Offer Stunning Views Along with Resort-Style Living

Screen Shot 2022-08-18 at 8.10.56 AM

Restrictions in place as Emerald Ash Borer found in Sherburne County

The county is now the 36th in the state with a confirmed presence of the invasive insect.

Fire, firefighters

Home that was scene of June standoff engulfed in fire

Authorities arrived to find the home fully ablaze.

Rosland park bridge

Crosstown Hwy. 62 reopens as footage emerges of truck hitting bridge

The westbound lanes were closed in Edina from Tuesday afternoon to Wednesday night.

Screen Shot 2022-08-17 at 8.31.42 PM

Flash flooding as torrential rain hammers Cambridge

Flooding and damage from a non-severe storm Wednesday evening.

Related