Quantcast
Get breaking news alerts via email

Click here to manage your alerts
A passer-by walks near an entrance to a Target retail store Thursday, Dec. 19, 2013 in Watertown, Mass. Target says that about 40 million credit and debit card accounts may have been affected by a data breach that occurred just as the holiday shopping season shifted into high gear. (AP Photo/Steven Senne)
Answers to questions about the Target data breach
First Published Dec 19 2013 05:34 pm • Last Updated Dec 20 2013 08:05 am

New York » With less than a week until Christmas, a real-life Grinch has stolen the credit and debit card information of about 40 million Target shoppers.

Target says anyone who made purchases by swiping cards at terminals in its U.S. stores between Nov. 27 and Dec. 15 may have had their accounts exposed. The stolen data includes customer names, credit and debit card numbers, card expiration dates and the three-digit security codes located on the backs of cards.

Join the Discussion
Post a Comment

The stolen information included Target store brand cards and major card brands such as Visa and MasterCard.

The data breach did not affect online purchases, the company said.

Here are some answers to the most common questions about the theft:

Q » I shopped at Target during that time. What should I do?

A » Check your credit card statements carefully. If you see suspicious charges, report the activity to your credit card companies and call Target at 866-852-8680. You can report cases of identity theft to law enforcement or the Federal Trade Commission.

You can get more information about identity theft on the FTC’s website at www.consumer.gov/idtheft, or by calling the FTC, at (877) IDTHEFT (438-4338).

Q » How did the breach occur?

A » Target isn’t saying how it happened. Industry experts note that companies such as Target spend millions of dollars each year on credit card security, making a theft of this magnitude particularly alarming.


story continues below
story continues below

Experts disagree about how the breach might have happened.

Avivah Litan, a security analyst with Gartner Research, says given all the security, she believes the breach may have been an inside job.

But thefts of this size are too big to be the work of company employees, says Ken Stasiak, founder and CEO of Secure State, a Cleveland-based information security firm that investigates data breaches like this one. Stasiak says that such breaches are generally perpetrated by organized crime or an overseas, state-sponsored hacker group.

Stasiak’s theory is that the hackers were able to breach Target’s main information hub and then wrote a code that gave them access to the company’s point of sale system and all of its cash registers. That access allowed the hackers to capture the data from shoppers’ cards as they were swiped.

James Lyne, global head of security research for the computer security firm Sophos, says something clearly went wrong with Target’s security measures.

"Forty million cards stolen really shows a substantial security failure," he says. "This shouldn’t have happened."

Q » Who pays if there are fraudulent charges on my account?

A » The good news is in most cases consumers aren’t on the hook for fraudulent charges.

Credit card companies are often able to flag the charges before they go through and shutdown your card. If that doesn’t happen, the card issuer will generally strip charges you claim are fraudulent off your card immediately.

And since the fraud has been tied to Target, it’ll be the retailer that ultimately compensates the banks and credit card companies.

Q » How can I protect myself?

Next Page >


Copyright 2014 The Salt Lake Tribune. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Top Reader Comments Read All Comments Post a Comment
Click here to read all comments   Click here to post a comment


About Reader Comments


Reader comments on sltrib.com are the opinions of the writer, not The Salt Lake Tribune. We will delete comments containing obscenities, personal attacks and inappropriate or offensive remarks. Flagrant or repeat violators will be banned. If you see an objectionable comment, please alert us by clicking the arrow on the upper right side of the comment and selecting "Flag comment as inappropriate". If you've recently registered with Disqus or aren't seeing your comments immediately, you may need to verify your email address. To do so, visit disqus.com/account.
See more about comments here.
Staying Connected
Videos
Jobs
Contests and Promotions
  • Search Obituaries
  • Place an Obituary

  • Search Cars
  • Search Homes
  • Search Jobs
  • Search Marketplace
  • Search Legal Notices

  • Other Services
  • Advertise With Us
  • Subscribe to the Newspaper
  • Login to the Electronic Edition
  • Frequently Asked Questions
  • Contact a newsroom staff member
  • Access the Trib Archives
  • Privacy Policy
  • Missing your paper? Need to place your paper on vacation hold? For this and any other subscription related needs, click here or call 801.204.6100.