The Terrifying Target Data Breach Is Even Worse Than We Thought

Up to 70 million Target customers are now believed to have had their data stolen, up from an original estimate of 40 million.

The massive Target data breach is much larger than first reported last month and has hurt sales, the company announced Friday.  
National Journal
Dustin Volz
Add to Briefcase
See more stories about...
Dustin Volz
Jan. 10, 2014, 4:18 a.m.

The his­tor­ic­ally gi­gant­ic data rob­bery from na­tion­wide Tar­get stores nabbed cred­it and deb­it card data from ap­prox­im­ately 70 mil­lion cus­tom­ers, Tar­get an­nounced Fri­day — a fig­ure al­most twice as large as ori­gin­ally re­por­ted.

The new num­ber, up from an earli­er es­tim­ate of 40 mil­lion, does not rep­res­ent an ad­di­tion­al data breach but a re­cal­cu­la­tion based on Tar­get’s own in­tern­al in­vest­ig­a­tion in­to the mat­ter, which was first ex­posed by cy­ber­se­cur­ity blog­ger Bri­an Krebs last month. The massive data heist in­cluded names, mail­ing ad­dresses, en­cryp­ted per­son­al iden­ti­fic­a­tion num­bers, and phone num­bers of the cus­tom­ers af­fected.

“I know that it is frus­trat­ing for our guests to learn that this in­form­a­tion was taken, and we are truly sorry they are hav­ing to en­dure this,” said Gregg Stein­hafel, Tar­get’s chair­man, in a state­ment. “I also want our guests to know that un­der­stand­ing and shar­ing the facts re­lated to this in­cid­ent is im­port­ant to me and the en­tire Tar­get team.”

Tar­get, in an at­tempt to lessen an on­go­ing pub­lic-re­la­tions night­mare, said it will con­tin­ue its in­vest­ig­a­tion and prom­ised that “guests will have zero li­ab­il­ity for the cost of any fraud­u­lent charges arising from the breach.” Ad­di­tion­ally, the com­pany has pledged to of­fer one year of free cred­it mon­it­or­ing and identi­fy-theft pro­tec­tion to all cus­tom­ers. Those wish­ing to en­roll for the ser­vices have three months to do so.

Earli­er this week Sen. Thomas Carp­er, D-Del., said he wanted to re­in­tro­duce a bill to cre­ate a na­tion­al re­port­ing stand­ard for data breaches like the one that seized Tar­get. It would ap­ply to re­tail­ers and fin­an­cial in­sti­tu­tions and re­quire both to tell gov­ern­ment and con­sumers of harm­ful data breaches.

“Con­sumers, gov­ern­ment agen­cies, and busi­nesses of all kinds have proven to be ex­tremely vul­ner­able to fraud and iden­tity theft, and the Tar­get data breach is just the latest ex­ample of this ser­i­ous prob­lem” Carp­er said in a state­ment.

The ori­gin­al breach rev­el­a­tion, which oc­curred dur­ing the hol­i­day shop­ping sea­son, left many won­der­ing wheth­er Tar­get’s growth would be hampered. Today’s an­nounce­ment makes it clear that the com­pany has suffered. Its fourth-quarter out­look up­date notes “mean­ing­fully weak­er-than-ex­pec­ted sales since the [data breach] an­nounce­ment. Tar­get also an­nounced it is also clos­ing eight stores around the coun­try.

Shares of Tar­get stock had dropped more than 1 per­cent Fri­day morn­ing.

What We're Following See More »
FCC Tightens Internet Privacy Standards
7 hours ago

Along party lines, the Federal Communications Commission on Thursday voted to tighten privacy standards for Internet service providers. "The regulations will require providers to receive explicit customer consent before using an individual’s web browsing or app usage history for marketing purposes. The broadband industry fought to keep that obligation out of the rules."

Obama Commutes Another 98 Sentences
7 hours ago

President Obama commuted the sentences of another 98 drug offenders on Thursday. Most of the convicts were charged with conspiracy to distribute drugs or possession with intent to distribute. Many of the sentences were commuted to expire next year, but some will run longer. Others are required to enroll in residential drug treatment as a condition of their release.

DOJ Busts More Than 50 for Call Center Scam
8 hours ago

The Department of Justice announced today it's charged "61 individuals and entities for their alleged involvement in a transnational criminal organization that has victimized tens of thousands of persons in the United States through fraudulent schemes that have resulted in hundreds of millions of dollars in losses. In connection with the scheme, 20 individuals were arrested today in the United States and 32 individuals and five call centers in India were charged for their alleged involvement. An additional U.S.-based defendant is currently in the custody of immigration authorities."

Johnson on Ballot Everywhere, Followed by Stein, McMullin
10 hours ago
Clinton Up 9 in USA Today Poll; Up 3 According to Fox
12 hours ago

A new USA Today/Suffolk University poll finds Clinton leads Trump by 9 points nationwide, 47% to 38%. A Fox News national poll has Clinton up just three points, 44% to 41% over Trump.


Welcome to National Journal!

You are currently accessing National Journal from IP access. Please login to access this feature. If you have any questions, please contact your Dedicated Advisor.