Target

In 2013, Target suffered a monumental cyber attack that exposed the payment card information of 41 million customers along with the contact information for approximately another 70 million. This attack was orchestrated through a spear phishing campaign targeted at a third-party vendor. By securing credentials from this vendor, the attackers gained access to Target's network. Over a two-month period, malware installed within the system collected vast amounts of customer data. The breach not only led to the departure of Target's CEO but also incurred substantial financial costs for the company. Target resolved claims across the country by paying fines totaling $18.5 million. Including the expenses for remediation efforts, consulting services, and other associated payments, the total cost of the breach approximated $290 million. This incident underscores the vital importance of cybersecurity vigilance and the necessity for robust protection measures to safeguard against sophisticated cyber threats.

Source: https://arcticwolf.com/resources/blog/10-major-retail-industry-cyber-attacks/

TPRM report: https://scoringcyber.rankiteo.com/company/target

"id": "tar700050724",
"linkid": "target",
"type": "Cyber Attack",
"date": "07/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': ['41 million (payment card '
                                               'information)',
                                               '70 million (contact '
                                               'information)'],
                        'industry': 'Retail',
                        'location': 'United States',
                        'name': 'Target',
                        'size': 'Large',
                        'type': 'Retailer'}],
 'attack_vector': 'Spear Phishing',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': ['41 million (payment card '
                                               'information)',
                                               '70 million (contact '
                                               'information)'],
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Payment card information',
                                              'Contact information']},
 'date_detected': '2013',
 'description': 'In 2013, Target suffered a monumental cyber attack that '
                'exposed the payment card information of 41 million customers '
                'along with the contact information for approximately another '
                '70 million. This attack was orchestrated through a spear '
                'phishing campaign targeted at a third-party vendor. By '
                'securing credentials from this vendor, the attackers gained '
                "access to Target's network. Over a two-month period, malware "
                'installed within the system collected vast amounts of '
                'customer data. The breach not only led to the departure of '
                "Target's CEO but also incurred substantial financial costs "
                'for the company. Target resolved claims across the country by '
                'paying fines totaling $18.5 million. Including the expenses '
                'for remediation efforts, consulting services, and other '
                'associated payments, the total cost of the breach '
                'approximated $290 million. This incident underscores the '
                'vital importance of cybersecurity vigilance and the necessity '
                'for robust protection measures to safeguard against '
                'sophisticated cyber threats.',
 'impact': {'data_compromised': ['Payment card information',
                                 'Contact information'],
            'financial_loss': '$290 million',
            'legal_liabilities': '$18.5 million in fines',
            'operational_impact': "Departure of Target's CEO",
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Third-party vendor'},
 'lessons_learned': 'Cybersecurity vigilance and robust protection measures '
                    'are crucial to safeguard against sophisticated cyber '
                    'threats.',
 'motivation': 'Financial Gain',
 'post_incident_analysis': {'root_causes': 'Spear phishing campaign targeted '
                                           'at a third-party vendor'},
 'regulatory_compliance': {'fines_imposed': '$18.5 million'},
 'response': {'remediation_measures': 'Remediation efforts'},
 'title': 'Target Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party vendor credentials'}