Malware Case Study

Target; an easy target
The Target breach which is said to be the second-largest retail cyber-attack in history wasn’t necessarily inventive, nor did it appear destined for success, yet hackers were able to access roughly 40 million customers personal information by installing a malware into Target’s security system.1 In the days leading up to Thanksgiving 2013 the hackers installed malware in Target’s security and payments system which was designed to steal every credit card used in store at over 1,797 U.S. locations. The data breach initially disclosed in December which exposed around 40 million customer’s names, card numbers, card expiration dates, card security codes and debit card pins were recorded for the hackers to see, although the pins were encrypted. After a later review Target disclosed additional information which later was said to be that roughly 70 million more consumers had their names, addresses, phone numbers and email addresses exposed.2

What exactly is malware? And what is a data breach?
Malware is short for "malicious software”. It is a software installed (usually without someone’s knowledge) to disrupt computer operation, gather information, or gain access to private computer systems. Malware can appear in the form of a code, a script, an active content or other software’s. Once malware enters a computer it is capable of basically spying any actions that are taken using that computer. Any internet surfing, typing in your passwords by observing every keystroke, stealing personal information and identities, reading the emails that are received or sent through the computer, hijacking your browser to web pages that ‘phish’ for your personal information, and a variety of other invasive tactics are used by the ha...

... middle of paper ...

...ontinues affords to warn Target of malware being present in their system, and by ranking it with the highest level of severity, Target did not seem to care and ignore all warnings. I have no doubt in my mind that the system expert that told Target years ago to fix their POS system was ignored. Target’s culture is as much to blame as anything. Target’s primary focus is getting people through their cash register as fast as possible to keep the customers happy. This means hundreds of millions of dollars to them. I believe that they were too caught up on getting their customers through their registers and couldn’t care less about the security of their customers’ personal information. I think this is sad because real customer service is not just a person standing there sliming at you but also knowing that your information will not by exposed every time I swipe my card.