Questions and answers on the Target breach @McAfee

In this live, call‑in style broadcast, hosts discuss the massive Target data breach, suggesting links to Russian organized crime and noting that similar point‑of‑sale malware infections are affecting multiple retailers nationwide. Security expert Robert Siciliano advises consumers on how to protect themselves: monitor bank and credit‑card statements daily, understand the differing dispute windows for credit (60 days) versus debit (2 days) cards, and consider using credit cards over debit to limit direct access to bank funds. He warns that mobile payment apps can be vulnerable if data isn’t encrypted and recommends installing antivirus software, using passwords, and keeping devices secure. Callers raise concerns about alternative payment methods—prepaid Visa cards, checks, cash—and Siciliano outlines the pros and cons of each, emphasizing vigilance regardless of the medium. He also discusses emerging security technologies such as chip‑and‑PIN cards and future mobile‑payment solutions, while calling for stronger retailer security and governmental oversight. Personal anecdotes about long‑term identity theft and debt‑buying illustrate the lasting impact of data breaches. Throughout, the tone is conversational yet instructional, aiming to empower listeners to take practical steps to safeguard their financial information.
Chapters
And we're talking about the great Target hack. Turns out it could be mob-related. How about that for a twist? Uh, and now just— we want to know, is it safe to shop anywhere anymore at the big retailers? Are you— do you feel safe? Are you gonna go cash? Call us up. It's Open Mike, 1-877-TELL-HLN's the number.
An international and nearly undetectable malware may have corrupted point-of-sale systems of multiple retailers. A one person tweeted, it takes me 10 years to build my credit I use it and it takes one swipe by Target to compromise my privacy.
Consumers need to be aware right now, paying a very close attention to their statements. You can check your statements online every single day.
It's not just about getting a new card anymore, it's really about being wary about anyone approaching you for information. They've got enough data on you so that you start to trust them. So a lot of people asking, is it safe to shop? That's what we want to know. We're learning how Target and some other of your More information was hacked and the details are getting bigger and bigger and bigger.
Yeah, it has to do with the machine that you swipe your card on. Those machines were infected with a malware virus. What's more, the Wall Street Journal is reporting it may be tied to organized crime from Russia.
Uh-oh.
So Target has sent out this letter to customers. I received it. They write, "Your name, mailing address, phone number, or email address may have been taken during this intrusion." Uh, but what's worse, it isn't just Target.
The company EyeSight, who contributed to the hacking investigation, says many retail organizations may not even know they are infected.
Yeah, in fact, Reuters is reporting 6 other similar cyber attacks are happening across the country right now as you go out and swipe your card. So stores don't even realize they're being hacked. We want to know, is it safe to shop with any type of credit card anywhere?
Yes, this story's screaming for an expert. We have one. Online security expert Robert Siciliano joining us now. Should we be worried? I mean, let's get back to the base question we're calling our— asking our viewers. Is it safe to shop anymore?
Yeah, it, um, it really isn't. Uh, using your credit card— yeah, well, using your credit card is a risky proposition, uh, when, when malware is discovered, uh, that's been sitting on a system for potentially months, uh, undetected. That is alarming. Um, Should you shop online? Should you shop in stores? Well, you're going to. Are you going to pay cash? Some will, some will stay with credit. In the end, you know, it's up to the consumer. If your card is compromised, that you have to pay attention to the statement. Otherwise, you're going to end up paying for, you know, an identity thief's dinner.
Okay, but listen, it's not realistic to not shop. We have to use our credit cards. I don't carry around enough cash. We're going to use it. So if something happens, What do you do? I got this letter from Target. They said to me that I could have been compromised. So what am I supposed to do right now? And for anyone at home that has had the same thing happen.
So right now, uh, you go ahead, use your card, right? But you have to pay close attention to your statement. You know, like every month you get your paper statement, which 9 out of 10 people don't check their statement, which is amazing to me. Uh, if you don't check your statement, then it's your problem if you get breached, meaning that you're going to end up paying that bill and you're going to be stuck with the charges because you only have 60 days to refute unauthorized charges. Otherwise, pay attention to your statements and every week go online and check your statement via the bank's or credit card's website, right? What I do is I check my statements online via my mobile phone. So my bank, my credit card, they all provide mobile apps and I can look at my charges every single day. So people are checking their Facebook accounts 20 times a day, why not check your statement for your bank on your mobile device?
Robert, you bring up a great point and maybe people at home may Maybe you're thinking, okay, forget credit cards or debit cards, I'm really just going to use my smartphone to buy stuff. Like the Starbucks app, we have that, you can make purchases by scanning your smartphone. Only problem is, up until last night, this app and your information were extremely vulnerable. You were at risk, partly because your information was not encrypted. So Robert, it has been fixed. How do we know now? We're going to the next level, okay, I'll use an app. How do we know that that's safe?
So the application itself was more than likely designed so that the user, somebody holding the phone, would be able to see and access that data. And the company manufacturing it didn't think otherwise, like, that's okay. But they didn't think that maybe if the phone's lost or stolen, then somebody else is going to have access to this data as well. And when that scenario was brought to their attention, they went ahead and they fixed it and they patched it up, which makes sense because that's really how it should be in the first place. Going forward, you know, your mobile phone phone today, especially Androids, you have to have antivirus, you know? Like McAfee's antivirus mobile security programs are absolutely necessary to protect mobile devices today, just like it's necessary on desktops as well. Without antivirus today, your devices are subject to spyware and people peering in on your information. And you also have to password protect these devices, because if they're lost or stolen, in the wrong hands, they could access your information.
Hey Robert, real quick. Do we help ourselves out if we swipe with a debit card to opt for credit versus punching in some PIN numbers? That help us, keep us a little safer?
I like the idea of opting for credit, and the reason is because with your debit card, if your PIN code is compromised, that's money out of your bank account. That is your cash money out of your bank account. Whereas if it's the credit card option, that's credit, and there are different rules in place regarding debit versus credit cards. You basically have 60 days to refute a credit card charge and 2 days to refute a debit card charge. So I only use debit cards for deposits and withdrawals, but not as a check or credit card. My debit card sits in my wallet most of the time, doesn't even have a Visa or MasterCard logo on it. So I use a credit card for everything.
Great tip there. Hey Robert, thanks again. I mean, so many questions, so many folks worried out there as we're talking 1 in 3 Americans affected. Some experts say it could end up being 2 out of every 3 Americans. So you've got questions, we're taking your calls. It's open mic, 1-877-TELL-HLN is the number. And there's your question. You feel it's safe to shop anywhere anymore? You going cash only? Call us up.
And actually, Robert's going to stick around, so if you have questions for him, chime in on that for open mic.
But the letter, the target letter—
I'm hacking, violated here.
It's an in-person hack.
Yeah, hackers, it's obviously leaving us all unsettled. I know, I gotta let—
and we're taking your calls, 1-877-TELL-HLN. Is it safe to shop anymore? We have our online security expert Robert Siciliano ready to go, ready to answer your questions. So let's go to the phones. Rhonda's with us, Colorado. Rhonda, what's your question?
Well, I was wondering if it would be smart to just go old school and start writing checks again.
How about that? Old school.
Cash.
Checks. Robert, what do you think?
Well, it's certainly an option. You know, plenty of people write checks every day with and without fraud. So there's pros and cons to each. You know, in the end, if you're using a check, you know, you still have to pay attention to your checkbook, make sure somebody doesn't steal it. You still have to pay attention to your register, make sure that there aren't any unauthorized checks written against, you know, your account. If you have a cleaner or a contractor coming over to your house, they can always pull a check out, write a check to themselves. You know, so there's fraud all around us. It's up to us, without a doubt, to pay attention to our accounts, to make sure that every check that's written, every charge that's made, every withdrawal that takes place is authorized by us. So you still have to pay attention to your accounts regardless of what medium of payment you use.
Truth-telling. Who checks their accounts every day?
Doug?
No. No.
Not even close.
Not even close.
No.
No.
But if you have my information, you didn't hear that.
That's right.
Right. So maybe you want some money. All right.
Good tip, Robert. We'll all get on that. Rachel's with us in Canada. Rachel, what's your question?
I actually have a quick comment. I don't use any credit cards at all. I buy the prepaid Visa cards, register them, insure them. They work— they're insured the same way that a regular Visa is. I use cash all the time, and the only place that my bank card goes is into my bank's machine.
Rachel, I have a question for you actually.
What if you lose it?
Do you worry about that? I've lost my credit card before, no harm no foul, but you lose that, it's like losing a wad of cash. And also, don't you lose a—
It's insured, I think, right?
But if you register it, then it's insured just like a regular Visa is.
Is it inconvenient to get all that cash out? To have cash on you at all times?
It's easier than being hacked. There you go, Rachel!
Rachel, very confident.
Proactive.
Robert, give us your thoughts on Rachel's plan here. It's working for her, she's very confident, and she's not worried like the other 110 million.
Yeah, she's a tad off the grid, just a tad, you know, but she's still involved, still has a credit card even though it's a temporary card. That's perfectly fine, you know. Look, we're moving forward with credit card payments whether people like it or not. Eventually we're going to move up to a more secure method of payment which is called chip and PIN. Chip and PIN, also EuroMasterCard Visa, it's the credit card that has a little chip in it which is a lot more secure than our existing cards. And eventually we're going to go to the mobile phone for payment as well. So there might be some vulnerabilities there, but look, there's always, always going to be vulnerabilities whether it's cash, whether it's that temporary credit card, there's always going to be fraud that we need to be aware of. So consumers We just have to become savvy to all the different scams, be aware of the different ruses the bad guys are trying to pull over our eyes. And in the long run, these retailers all have to beef up their security, and government is going to have to get involved because when hacks like this occur, it looks like there's going to need to be a bit more oversight.
Got it. Let's get another call in. Skyler is with us from Alabama. Skyler, what's your comment or question?
Uh, I had my identity stolen in '05 by one girl, and she sold my name, my social, and all my personal information. And about every 3 months I am still going to court. And what has happened is the credit cards have wrote off everything because I went to the detectives, we— I did everything that I needed to do. And when the credit cards wrote it off, they sold it to debtors. So now I get contacted by all these debtors that buy my debt for pennies on the dollar, and then they add several thousand dollars to it. And so where was once was $20,000, now according to the debtor's court, I owe over $70,000, but it isn't actually my debt. I go to court, I show the judge all the papers, and he said, okay, you don't owe it. So then what that lawyer does is he takes it back to his company and he sells it to another debtor, and then they add more money to it.
And, and hence your life, you've been battling this. I wouldn't say life ruined, but definitely an inconvenience, to say the least, for 9 years and counting. That's unbelievable.
Hey, Robert, good luck to you on that.
Yeah, my goodness. Robert, thanks again. Great insight and advice here as we try and navigate the ever-expanding technology and how we can keep our info safe. Appreciate it.
Have a good weekend, Robert.
Thank you.
More from Robert

America's #1 Top Cyber Security Speaker Architect of The Strategic Human Firewall™

Robert Siciliano Cyber Security Speaker, Cybersecurity Awareness & Security Appreciation expert.

Nancy Guthrie Deleted doesn’t mean destroyed- FBI recovers 'inaccessible' surveillance video servers







