Skip to main content

Target: Hackers used stolen credentials to access system


Investigators have discovered that hackers stole credentials from a vendor to access Target's systems.

The Star Tribune reports Target spokeswoman Molly Snyder would not give details on the vendor's identity or how the hackers stole the credentials.

According to the newspaper, Snyder said since Target discovered the breach on Dec. 15, it has taken extra precautions to limit and update access to some platforms.

More credit and debit card information from the breach continues to flood the black market.

Security expert Brian Krebs said millions of card numbers stolen from Target shoppers are being bought and sold in online "card shops," according to the Pioneer Press.

The newspaper reports that Krebs said Wednesday the "card shops" – which sell the stolen card data to thieves worldwide – are still posting huge batches of credit and debit cards that can be traced back to the Target breach.

About 40 million Target customers had their credit and debit card information stolen during the holiday shopping season data heist. Hackers also swiped personal information including email addresses, phone numbers, names and home addresses for another 70 million..

The Pioneer Press reports a growing number of banks are reissuing new cards instead of advising customers to monitor their statements and report any fraud, so far around 15.3 million cards have now been reissued.

Also Wednesday, Attorney General Eric Holder said the Justice Department is committed to tracking down the thieves responsible for stealing information from millions of Target customers.

The Associated Press reports Holder said, before the Senate Judiciary Committee, the government will also hunt down any people and groups that exploit the stolen data through credit card fraud.

On his blog, Krebs said an examination of the malware used in the Target breach suggests attackers may have had help from a poorly secured feature built into a widely-used IT management software product that was running on the retailer's internal network.

Target said it is working with the Secret Service and the Justice Department in response to the breach.

Next Up

D'Angelo Russell

D'Lo's late takeover helps Timberwolves win double-OT thriller

Russell caught fire to help the Timberwolves get back to .500.

Gopher Football

Gophers suffocate Badgers, reclaim Paul Bunyan's Axe

Minnesota picked up its first home win over the Badgers since 2003.

Meeker County Sheriff's Office

Boy, 6, run over after falling off trailer in Meeker Co. tree farm accident

He was airlifted to Hennepin County Medical Center with internal injuries.

Target store

Target unveils deals for 2-day 'Cyber Monday' event

The promotion kicks off Sunday, November 28.

Screen Shot 2021-11-27 at 9.59.30 AM

Edina police warn of recent burglary trend targeting garages and vehicles

The Edina Police Department is increasing patrols in affected neighborhoods in response to the trend.

Screen Shot 2021-11-27 at 9.03.06 AM

Charges: Man shot Uber Eats driver making a delivery in Cottage Grove

Otis Donnell Shipp was charged with second-degree attempted murder after turning himself in on Wednesday.

Screen Shot 2021-11-27 at 7.36.14 AM

Waterfront hotel in Duluth sustains damage in kitchen fire

Authorities estimate the damage at around $75,000.

Screen Shot 2021-11-27 at 7.15.18 AM

Large groups of thieves target 2 Twin Cities Best Buys on Black Friday

It bears similarities to the flash-mob style thefts seen recently in California.

Karl-Anthony Towns

Timberwolves' winning streak snapped at five games

The Wolves' bid for their longest winning streak since 2014 came up short.

Screen Shot 2020-08-14 at 6.45.53 PM

Teen arrested over fatal shooting of 5-year-old boy in Brooklyn Park

Police say the teen was filming a social media video while handling a gun.

Joe Biden

President Biden coming to Minnesota to promote Bipartisan Infrastructure Law

Tuesday's trip follows passage of the $1.2 trillion Bipartisan Infrastructure Deal.