News

Target says data theft larger than originally thought

Target says data theft larger than originally thought

TARGETED: The nation's third-largest retailer says new evidence shows more customer information may have been stolen in the second-largest data theft in American history. Photo: Associated Press

By Dhanya Skariachan and Jim Finkle

NEW YORK/BOSTON (Reuters) – The data breach at Target Corp over the holiday shopping season was far bigger than initially thought, the U.S. retailer said on Friday, as state attorneys general announced a nationwide investigation into the cyber-attack.

The personal information of at least 70 million customers was stolen by cyber-criminals, including names, mailing addresses, phone numbers and email addresses, Target said. Previously, it said data was stolen from some 40 million credit and debit cards between Nov. 27 and Dec. 15.

Spokeswoman Molly Snyder said it was likely the two groups overlap, but said the extent of overlap was not clear yet.

“I know that it is frustrating for our guests to learn that this information was taken and we are truly sorry they are having to endure this,” Target Chief Executive Gregg Steinhafel said in a statement on Friday.

The No. 3 U.S. retailer lowered its fourth-quarter profit forecast, in part due to weaker-than-expected sales since reports of the cyber-attack emerged in mid-December. Shares of Target fell 1 percent to $62.72, hovering near a year-low.

Security experts said they feared Target has not yet fully grasped the scope of the data breach, which is considered the second biggest payment card attack in retail history.

“I think they still have no idea how big this is,” said David Kennedy, a former U.S. Marine Corps cyber-intelligence analyst who runs his own consulting firm, TrustedSec LLC.

Attorneys general from New York and Massachusetts announced on Friday that they were joining a nationwide probe into the security breach. New York Attorney General Eric Schneiderman called Target’s announcement on Friday “troubling”.

“Consumers in New York and around the country expect and deserve companies to protect their personal information when they shop on websites and in their stores,” Schneiderman told Reuters.

Jaclyn Falkowski, a spokeswoman for the Connecticut Attorney General, said: “We are actively engaged in investigating this matter with colleagues across the country and will be looking at these new and serious aspects disclosed by Target today as part of that investigation.”

Target said last month that hackers stole data from up to 40 million credit and debit cards during the peak holiday shopping season. Information security experts said the data could be used to fabricate false magnetic strip credit cards.

Cyber-criminals typically sell stolen personal information on underground exchanges for use in email “phishing” campaigns aimed at persuading victims to hand over even more sensitive information, such as bank account numbers.

If a Target customer’s information was stolen, “I would be very careful in looking out for phishing scams,” said Mikko Hypponen, chief research officer for the computer security software company F-Secure.

Reports of fraudulent card charges have been growing since the breach was disclosed, said an executive at one major card issuer who asked not to be identified.

The full magnitude of the damage won’t likely be known until later in January, when customers receive and examine their monthly statements and call their banks, the executive said. He added that in past cases, it has taken 30 to 45 days for the vast majority of bad charges to surface.

Target and credit card issuers have said customers will have zero liability for the cost of any fraudulent charges.

The largest-known breach at a U.S. retailer, uncovered in 2007 was at TJX Cos Inc, where more than 90 million credit cards were stolen over about 18 months.

“DISMAL” SALES

On Friday Target cut its fourth-quarter adjusted earnings forecast for U.S. operations to $1.20 to $1.30 per share from $1.50 to $1.60.

The Minneapolis-based company also forecast a 2.5 percent decline in fourth-quarter same-store sales. It had forecast flat sales.

Target expects full-year earnings per share to include charges related to the data breach, but said it could not estimate the costs.

Janney Capital Markets analyst David Strasser described Target’s holiday sales report card as “dismal.”

“We all knew it was going to be bad at Target, but it was the magnitude of decline that was unclear,” he said. “Clearly, the first half of the fourth quarter was impacted by an aggressive holiday season across retail, but the credit card data breach had a significant impact post December 19th.”

“The key risk remains the time it takes for consumers to forgive Target. If this is like past breaches this should normalize as the year progresses,” said Strasser.

(Additional reporting by Karen Freifeld and Jilian Mincer in New York, Siddharth Cavale in Bangalore and Alina Selyukh in Washington; Writing by Richard Valdmanis; Editing by Tiffany Wu and Jeffrey Benkoe)

Recent Headlines

in Sports

Judge OKs record-setting $2B sale of Clippers

Los Angeles Clippers owner Donald Sterling, center, and V. Stiviano, left, watch the Clippers play the Los Angeles Lakers during an NBA preseason basketball game in Los Angeles on Monday, Dec. 19, 2011. NBA spokesman Mike Bass said in a statement Saturday, April 26, 2014, that the league is in the process of authenticating the validity of the recording posted on TMZ's website. Bass called the comments "disturbing and offensive."

A judge has ruled against Clippers owner Donald Sterling and cleared the way for the $2 billion sale of the team to Steve Ballmer.

in Music

Glen Matlock denies new Sex Pistols reunion

John Lydon, right, and Glen Matlock of The Sex Pistols perform at the Roxy in West Hollywood, Calif., on Thursday, Oct. 25, 2007.

Sex Pistols star Glen Matlock dashes fans' hopes of another reunion by insisting he hasn't had any contact with John Lydon in five years.

in Music

Aretha Franklin storms out of fast food joint

FILE - In this May 11, 2013 file photo, Aretha Franklin performs during McDonald's Gospelfest 2013 at the Prudential Center in Newark, N.J.Franklin won’t say what has caused her latest health problems, but says she’s had a “miraculous” recovery and is looking forward to performing soon.In a phone interview on Tuesday, Aug. 20, Franklin said that she recently had a cat scan and that it showed she was 85 percent improved. The 71-year-old has canceled several concerts and public appearances and blamed it on unspecified treatment.

Aretha Franklin stormed out a Johnny Rockets in Ontario, Canada last week after a nasty encounter with a rude employee.

in Sports

Byron Scott to lead Lakers…or will he?

FILE - In this April 17, 2013, file photo, then-Cleveland Cavaliers coach Byron Scott watches an NBA basketball game in Charlotte, N.C. Scott said this weekend that he has been hired by the Los Angeles Lakers, but the club insisted Sunday, July 27, 2014, that no deal has been reached. Scott, who won three NBA titles as a shooting guard for the Lakers, told KCBS-TV he will take over the club, which hasn't had a coach since Mike D'Antoni resigned April 30.

The club continues to insist that no deal has been reached.

in Sports

Only arguing remains in Sterling trail

FILE - In this Nov. 12, 2010, file photo, Shelly Sterling sits with her husband, Donald Sterling, right, during the Los Angeles Clippers' NBA basketball game against the Detroit Pistons in Los Angeles. With a $2 billion sale of the Clippers hanging in the balance, a judge is set to determine Monday, June 30, 2014, if the terms of a family trust alone are enough to confirm Donald Sterling was properly removed as trustee and allow his estranged wife to sell the team without his consent.

Only final arguments and a ruling remain in the trial to determine whether Donald Sterling's estranged wife can sell the Los Angeles Clippers for $2 billion.

Bellingham Traffic