1
Target Security breach
Haziel Landaverde
Idaho State University
Informatics 4380: Networking and Cybersecurity
Prof. Robert Houghton
December 12, 2025
2
In late 2013, Target a major corporation and one of the largest retailers in the United
States became susceptible to one of the biggest security breaches in retail history. In this attack,
over 70 million customer accounts were compromised, including personal and financial
information, all due to a vulnerability from one of its vendors, Fazio Mechanical Services. This
attack highlights how even a large company such as a target could still fall victim to
compromization.
This attack occurred when credentials were compromised from Fazio Mechanical Services, a
third-party vendor that provided HVAC services. Attackers were able to exploit the vendors’
access to Target’s systems, install malware on their terminals, and collect unencrypted card data.
Despite the tools Target did have such as a 1.6 million FireEye malware detection system and
constant monitoring, Target failed to catch the intrusion, this resulted in the theft of tens of
millions of credits and debit card numbers, including other personal information.
Once the breach was found, Target acted immediately, working with law enforcement and
cybersecurity companies to contain the attack. They were also transparent with affected
customers and offered one free year of credit monitoring. Afterwards Target implemented
several security improvements such as Cyber Fusion Center, POS terminals with EMV chip
readers and PIN codes, and investing in cybersecurity technology. Changes in management were
also made after the resignation of their CEO and the replacement of their CIO. These steps
helped Target recover its reputation from the attack and showed how vendor management is just
as important as their own security measures.
Bruce Shneiders methodology for SolarWinds Hack.
3
1. What assets where they trying to protect
The assets Target was attempting to protect were customers' financial information and
other company data.
2. What are the risks to these assets
The risks of these assets' compromization are credential theft, unauthorized network
access, and their reputation.
3. How well does the security solution mitigate those risks?
While their malware detectors are good, they failed to detect the attack due to its vendor
being compromised, and unpatched systems, so the security measures mitigated risks
only partially.
4. What other risks does the security solution cause?
Overreliance on their security tools can create a false sense of security, slowing human
response. Strict security controls might have also disrupted the workflow and added
additional work.
5. What costs and trade-offs does the security solution impose?
The security solution incurred both financial costs and increased labor. However, these
are both efficient if daily operations are to continue without any disruption.
What I would have done differently
Although Target did well in preventing the attack and the outcomes, there were
things that could have changed. I would have prioritized vendor risk management by
conducting multiple audits on their systems. I would also ensure that malware alerts are
taken immediately to a response team and create better training for employees dealing
4
with these systems. These measures would help prevent the situation from before it ever
occurred.
In conclusion, the Target breach highlights how major corporations with
substantial resources are vulnerable to cyberattacks. This incident illustrates the
importance of cybersecurity, showing how companies must not only be aware of their
own systems but the systems of their vendors as well. Ultimately, this case serves as a
lesson that breaches can be inevitable, but good procedures can be mitigated through
preparation and vigilance.