Target

In one of the most notable retail cyber attacks, Target experienced a devastating breach in 2013 that exposed 41 million payment cards and the contact information of roughly 70 million customers. The attackers employed a spear phishing technique to compromise a third-party vendor's network credentials. Once inside Target's network, they installed malware to capture customer payment data for two months. The breach had far-reaching consequences, including the departure of Target's CEO and fines totaling $18.5 million to resolve nationwide claims. The total cost to Target, considering remediation, consulting fees, and other related expenses, approximately amounted to $290 million. This incident underscores the critical importance of cybersecurity in the retail sector and highlights the vulnerabilities associated with third-party vendors.

Source: https://arcticwolf.com/resources/blog/10-major-retail-industry-cyber-attacks/

TPRM report: https://scoringcyber.rankiteo.com/company/target

"id": "tar245050524",
"linkid": "target",
"type": "Cyber Attack",
"date": "05/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '70 million',
                        'industry': 'Retail',
                        'location': 'United States',
                        'name': 'Target',
                        'type': 'Retail'}],
 'attack_vector': 'Spear Phishing',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': ['41 million payment cards',
                                               '70 million customers'],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Payment card information',
                                              'Contact information']},
 'date_detected': '2013-12-15',
 'date_publicly_disclosed': '2013-12-19',
 'description': 'In one of the most notable retail cyber attacks, Target '
                'experienced a devastating breach in 2013 that exposed 41 '
                'million payment cards and the contact information of roughly '
                '70 million customers. The attackers employed a spear phishing '
                "technique to compromise a third-party vendor's network "
                "credentials. Once inside Target's network, they installed "
                'malware to capture customer payment data for two months. The '
                'breach had far-reaching consequences, including the departure '
                "of Target's CEO and fines totaling $18.5 million to resolve "
                'nationwide claims. The total cost to Target, considering '
                'remediation, consulting fees, and other related expenses, '
                'approximately amounted to $290 million. This incident '
                'underscores the critical importance of cybersecurity in the '
                'retail sector and highlights the vulnerabilities associated '
                'with third-party vendors.',
 'impact': {'data_compromised': ['41 million payment cards',
                                 'contact information of 70 million customers'],
            'financial_loss': '$290 million',
            'legal_liabilities': '$18.5 million in fines',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Third-party vendor'},
 'lessons_learned': 'The importance of cybersecurity in the retail sector and '
                    'the vulnerabilities associated with third-party vendors.',
 'post_incident_analysis': {'root_causes': "Compromised third-party vendor's "
                                           'network credentials'},
 'regulatory_compliance': {'fines_imposed': '$18.5 million'},
 'title': 'Target Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': "Third-party vendor's network credentials"}