The Terrifying Target Data Breach Is Even Worse Than We Thought

Up to 70 million Target customers are now believed to have had their data stolen, up from an original estimate of 40 million.

The massive Target data breach is much larger than first reported last month and has hurt sales, the company announced Friday.  
National Journal
Dustin Volz
See more stories about...
Dustin Volz
Jan. 10, 2014, 4:18 a.m.

The his­tor­ic­ally gi­gant­ic data rob­bery from na­tion­wide Tar­get stores nabbed cred­it and deb­it card data from ap­prox­im­ately 70 mil­lion cus­tom­ers, Tar­get an­nounced Fri­day — a fig­ure al­most twice as large as ori­gin­ally re­por­ted.

The new num­ber, up from an earli­er es­tim­ate of 40 mil­lion, does not rep­res­ent an ad­di­tion­al data breach but a re­cal­cu­la­tion based on Tar­get’s own in­tern­al in­vest­ig­a­tion in­to the mat­ter, which was first ex­posed by cy­ber­se­cur­ity blog­ger Bri­an Krebs last month. The massive data heist in­cluded names, mail­ing ad­dresses, en­cryp­ted per­son­al iden­ti­fic­a­tion num­bers, and phone num­bers of the cus­tom­ers af­fected.

“I know that it is frus­trat­ing for our guests to learn that this in­form­a­tion was taken, and we are truly sorry they are hav­ing to en­dure this,” said Gregg Stein­hafel, Tar­get’s chair­man, in a state­ment. “I also want our guests to know that un­der­stand­ing and shar­ing the facts re­lated to this in­cid­ent is im­port­ant to me and the en­tire Tar­get team.”

Tar­get, in an at­tempt to lessen an on­go­ing pub­lic-re­la­tions night­mare, said it will con­tin­ue its in­vest­ig­a­tion and prom­ised that “guests will have zero li­ab­il­ity for the cost of any fraud­u­lent charges arising from the breach.” Ad­di­tion­ally, the com­pany has pledged to of­fer one year of free cred­it mon­it­or­ing and identi­fy-theft pro­tec­tion to all cus­tom­ers. Those wish­ing to en­roll for the ser­vices have three months to do so.

Earli­er this week Sen. Thomas Carp­er, D-Del., said he wanted to re­in­tro­duce a bill to cre­ate a na­tion­al re­port­ing stand­ard for data breaches like the one that seized Tar­get. It would ap­ply to re­tail­ers and fin­an­cial in­sti­tu­tions and re­quire both to tell gov­ern­ment and con­sumers of harm­ful data breaches.

“Con­sumers, gov­ern­ment agen­cies, and busi­nesses of all kinds have proven to be ex­tremely vul­ner­able to fraud and iden­tity theft, and the Tar­get data breach is just the latest ex­ample of this ser­i­ous prob­lem” Carp­er said in a state­ment.

The ori­gin­al breach rev­el­a­tion, which oc­curred dur­ing the hol­i­day shop­ping sea­son, left many won­der­ing wheth­er Tar­get’s growth would be hampered. Today’s an­nounce­ment makes it clear that the com­pany has suffered. Its fourth-quarter out­look up­date notes “mean­ing­fully weak­er-than-ex­pec­ted sales since the [data breach] an­nounce­ment. Tar­get also an­nounced it is also clos­ing eight stores around the coun­try.

Shares of Tar­get stock had dropped more than 1 per­cent Fri­day morn­ing.

What We're Following See More »
Clinton Campaign Also Hacked
1 hours ago
More People Watched Trump’s Acceptance Speech
1 hours ago

Hillary Clinton hopes that television ratings for the candidates' acceptance speeches at their respective conventions aren't foreshadowing of similar results at the polls in November. Preliminary results from the networks and cable channels show that 34.9 million people tuned in for Donald Trump's acceptance speech while 33.3 million watched Clinton accept the Democratic nomination. However, it is still possible that the numbers are closer than these ratings suggest: the numbers don't include ratings from PBS or CSPAN, which tend to attract more Democratic viewers.

North Carolina Voter ID Law Struck Down
4 hours ago

The US Fourth Circuit Court of Appeals on Friday overturned North Carolina's 2013 voter ID law, saying it was passed with “discriminatory intent." The decision sends the case back to the district judge who initially dismissed challenges to the law. "The ruling prohibits North Carolina from requiring photo identification from voters in future elections, including the November 2016 general election, restores a week of early voting and preregistration for 16- and 17-year-olds, and ensures that same-day registration and out-of-precinct voting will remain in effect."

Massive Oil Pipeline Approved for the Midwest
5 hours ago

An oil pipeline almost as long as the much-debated Keystone XL has won final approval to transport crude from North Dakota to Illinois, traveling through South Dakota and Iowa along the way. "The U.S. Army Corps of Engineers gave the final blessing to the Dakota Access pipeline on Tuesday. Developers now have the last set of permits they need to build through the small portion of federal land the line crosses, which includes major waterways like the Mississippi and the Missouri rivers. The so-called Bakken pipeline goes through mostly state and private land."

GDP Grew at 1.2% in Q2
6 hours ago

The U.S. economy grew at an anemic 1.2% in the second quarter, "well below the 2.6% growth economists surveyed by The Wall Street Journal had forecast." Consumer spending was "robust," but it was offset by "cautious" business investment. "Since the recession ended seven years ago, the expansion has failed to achieve the breakout growth seen in past recoveries. "The average annual growth rate during the current business cycle, 2.1%, remains the weakest of any expansion since at least 1949."