Vendor linked to Target breach: 'We are a victim of a sophisticated cyber attack'

Author:
Updated:
Original:

A Pennsylvania refrigeration, heating and air conditioning company that was linked to the massive Target data breach earlier this week confirmed it was also a victim of a "cyber attack."

Security blogger Brian Krebs called out Fazio Mechanical Services Inc. of Sharpsburg on Wednesday, saying the hackers who snatched personal and financial information belonging to millions of Target shoppers gained access to Target's network using credentials stolen from Fazio.

"Like Target, we are a victim of a sophisticated cyber attack operation," Ross Fazio, Fazio's president and owner, said in a written statement. "We are fully cooperating with the Secret Service and Target to identify the possible cause of the breach and to help create proactive initiatives that will further enhance the security of client/vendor connections making them less vulnerable to future breaches."

The subcontractor worked at a number of Target locations and other top retailers, according to Krebs. An anonymous cyber security expert told Krebs that it is common for large retail operations to have a team that monitors energy consumption and temperatures in stores. To do this, "vendors need to be able to remote into the system," the expert said.

However, Fazio said it does not perform remote monitoring or control heating, cooling and refrigeration systems for Target.

"Our data connection with Target was exclusively for electronic billing, contract submission and project management," Fazio said.

The company says no other customers have been affected by the breach.

The U.S. Secret Service has confirmed an investigation into Fazio, but wouldn't provide further details, the Associated Press reports. Minneapolis-based Target and the U.S. Attorney's Office also declined to comment.

Next Up

ballot voting vote

Appeals court rules Minnesota votes must be in by 8 p.m. on Election Day

Pending a further challenge, votes received after 8 p.m. on Election Day will not be counted.

Donald Trump

Confusion over where Trump campaign rally will be held Friday

It sounds like it'll be held at the airport in Rochester.

Screen Shot 2020-10-29 at 3.19.05 PM

This video of the Lowry Hill Tunnel walls being cleaned is oddly satisfying

The tunnel will be closed overnight Thursday for cleaning.

gray wolf

Gray wolf removed from the endangered species list

A decision on whether they can be hunted in Minnesota will come later.

covid saliva test

Minnesota opening its 7th saliva testing location in St. Paul

The tests are free and open to anyone regardless of if they have symptoms.

pete stauber - qunn nystrom CD8

Election 2020 preview: Minnesota's 8th Congressional District

It's a race between incumbent Rep. Pete Stauber and Democratic challenger Quinn Nystrom.

coronavirus, covid-19, icu

Minnesota's COVID-19 hospitalizations increase by 27.5% in 24 hours

Bring Me The News confirmed that the dramatic increase is not a numbers error.

fire, flames

Lives saved as passerby, city workers rescue from 3 from Golden Valley fire

The Golden Valley Fire Department responded to the fire Wednesday morning.

Caribou Coffee Holiday 2020

Caribou Coffee rolls out holiday cups, menu early

The holiday season is underway at some Twin Cities stores, with a nationwide rollout planned for Nov. 5.

Related