Revisiting the Target breach of 2013

Between November 27 and December 18, 2013, the Target Corporation’s network was breached. 40 million credit and debit card numbers and 70 million records of personal information were stolen. The ordeal cost credit card unions over two hundred million dollars for just reissuing cards.

Six months prior to the breach, Target deployed a well-known and reputable intrusion and malware detection service named FireEye, which was guided by the CIA during its early development. Unfortunately, multiple malware alerts were ignored. Some prevention functionalities were turned off by the administrators who were not familiar with the FireEye system. Target Corp. missed the early discovery of the breach.

Continue reading here