Target

In one of the most significant retail cyberattacks, Target experienced a massive breach in 2013, exposing 41 million payment cards and contact details for about 70 million customers. The attackers initially targeted a third-party vendor using a spear phishing technique to obtain credentials. They then infiltrated Target's network, deploying malware to capture customer data over two months. This incident had profound repercussions, leading to the CEO's departure and resulting in fines and expenses around $290 million for the company. It underscored the critical need for robust cybersecurity measures to protect sensitive customer information and maintain consumer trust.

Source: https://arcticwolf.com/resources/blog/10-major-retail-industry-cyber-attacks/

TPRM report: https://scoringcyber.rankiteo.com/company/target

"id": "tar318050424",
"linkid": "target",
"type": "Vulnerability",
"date": "12/2013",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '70 million',
                        'industry': 'Retail',
                        'location': 'United States',
                        'name': 'Target',
                        'size': 'Large',
                        'type': 'Retail'}],
 'attack_vector': 'Spear Phishing',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '41 million payment cards, 70 '
                                              'million contact details',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Payment card information',
                                              'Contact details']},
 'date_detected': '2013-11-27',
 'date_publicly_disclosed': '2013-12-19',
 'date_resolved': '2013-12-19',
 'description': 'In one of the most significant retail cyberattacks, Target '
                'experienced a massive breach in 2013, exposing 41 million '
                'payment cards and contact details for about 70 million '
                'customers. The attackers initially targeted a third-party '
                'vendor using a spear phishing technique to obtain '
                "credentials. They then infiltrated Target's network, "
                'deploying malware to capture customer data over two months. '
                'This incident had profound repercussions, leading to the '
                "CEO's departure and resulting in fines and expenses around "
                '$290 million for the company. It underscored the critical '
                'need for robust cybersecurity measures to protect sensitive '
                'customer information and maintain consumer trust.',
 'impact': {'brand_reputation_impact': 'Significant',
            'data_compromised': ['Payment card information', 'Contact details'],
            'financial_loss': '$290 million',
            'identity_theft_risk': 'High',
            'operational_impact': "CEO's departure",
            'payment_information_risk': 'High',
            'systems_affected': 'Point-of-Sale (POS) Systems'},
 'initial_access_broker': {'entry_point': 'Third-party vendor credentials'},
 'investigation_status': 'Resolved',
 'lessons_learned': 'The incident underscored the critical need for robust '
                    'cybersecurity measures to protect sensitive customer '
                    'information and maintain consumer trust.',
 'motivation': 'Financial Gain',
 'post_incident_analysis': {'root_causes': 'Third-party vendor credentials '
                                           'obtained through spear phishing'},
 'references': [{'source': 'Various'}],
 'regulatory_compliance': {'fines_imposed': '$290 million'},
 'threat_actor': 'Unknown',
 'title': 'Target Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party vendor credentials'}