Target's breach compromised 40 million credit cards and 70 million personal records, likely part of a broader attack using malware called Kartosha. The Department of Homeland Security warns the breach may affect multiple retailers. Security expert Robert Siciliano recommends monitoring your bank statements daily.
Chapters
Welcome back to New Day. It is Friday, January 17th, 7 o'clock now in the East. New this morning, disturbing details about that Target hack attack. We're learning Target wasn't the only retailer hit. There are clues about who's behind it and their level of sophistication, which we now know is off the charts. Let's bring in Chief Business Correspondent Christine Romans. Boy, we call it the Target attack, but now we're going to have to call it something else.
Yeah, it's bigger than that. A lot of what investigators know about the hack attacks is being kept under wraps. Cyber forensic —experts still sifting through all the clues. What we do know is Homeland Security is worried this is not isolated.
An international and nearly undetectable malware may have corrupted point-of-sale systems of multiple retailers. A bulletin distributed to retailers by the Department of Homeland Security suggests the shocking holiday breach affecting Target stores across the country has potentially infected a large number of retail operations. A cyberattack that has already compromised the credit card data of 40 million Target customers and the information of up to 70 million more.
Now with this new information that many other retailers could potentially been breached, uh, that number could potentially double in the next couple of weeks.
According to a cybersecurity firm called EyeSight, who has contributed to the investigation, many retail organizations may not know that they've been infected. This software contains a new kind of attack method that is able to covertly subvert network controls and common forensic tactics, concealing stopping all data transfers. It's an unknown exploit, one that they haven't seen before. iSight called the malicious computer code Kartosha, a Russian word, because parts of the code were written in Russian. According to the Wall Street Journal, who spoke to sources familiar with the report, parts of Kartosha have been on the internet's black market for weeks. The paper added that unnamed U.S. officials say these details suggest the attack may have ties to organized crime from the former Soviet Union. And in a newly issued by Target to his customers, the cyberattack stole much more than PIN numbers. Names, mailing address, phone numbers, and email addresses were also taken.
Consumers need to be aware right now, paying a very close attention to their statements. You can check your statements online every single day.
Target will testify before Congress in early February. No federal laws exist setting out standard rules for when and how companies must report data breaches to customers and to law enforcement. Officials say the main objective of the of the hearing will be how customers can protect themselves. But fair to say, it is the Wild West out there with your information and hackers around the world trying to get it. And fair to say, it's, uh, customers have almost a right and responsibility to be very wary of what they're being told here about this. Absolutely. This is going to be bigger. It's not just Target. And we know, I mean, everyone's very concerned about how wide this goes. Thanks, Christine. You're welcome.
