This report analyzes what has been reported to date about the Target data breach, using the “intrusion kill chain” framework, an analytical tool introduced by Lockheed Martin security researchers in 2011, and today widely used by information security professionals in both the public and the private sectors.

Feb 2, 2015 · Target personnel discovered the breach and notified the U.S. Justice Department by December 13th. As of December 15th, Target had a third-party forensic team in place and the attack mitigated. On...

May 23, 2017 · Retail giant Target will pay an $18.5 million multistate settlement, the largest ever for a data breach, to resolve state investigations of the 2013 cyber attack that affected more than 41...

May 24, 2017 · In one of the biggest data breaches to hit a U.S. retailer, Target had reported that hackers stole data from up to 40 million credit and debit cards of shoppers who had visited its stores...

Mar 12, 2024 · Of the 11 gigabytes of data leaked in the event, up to 70 million people's names, mailing addresses, phone numbers, email addresses, and credit card information were exposed.

Dec 14, 2023 · On Dec. 18, 2013, KrebsOnSecurity broke the news that U.S. retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards...

Hackers infiltrated Target's network by exploiting a vulnerability in a third-party vendor, Fazio Mechanical Services. Using stolen credentials, the attackers gained access to Target’s systems, where they deployed malware on the company’s point-of-sale (POS) devices.