Tag / 3 entries / feed available

Retail

3 of the 76 analyses in Data Breaches carry this tag. All 3 are scored against the four invariants; the matrix below is that evidence.

How this tag scores against the four invariants

Breach	HSF	PEC	EGR	SCA
Home Depot Data Breach April 2014
Target Data Breach 2013
TJX Companies Inc. Data Breach

HSF · PEC · EGR · SCA — filled where the invariant would have prevented or contained the breach

0132014-04-01

Home Depot Data Breach April 2014

Prevented by: HSF, PEC, EGR

The Home Depot data breach, occurring in April 2014, resulted in the theft of over 56 million payment card records through custom-built malware targeting point-of-sale systems across the US and Canada. Organized cybercriminal groups deployed POS-scraping malware using stolen vendor credentials, exfiltrating high volumes of financial data. This incident highlights significant vulnerabilities in third-party access management and the effectiveness of traditional security measures against advanced threats.

0112013-12-18

Target Data Breach 2013

Prevented by: HSF, PEC, EGR

The Target data breach of 2013 exposed approximately 110 million customer records, including 40 million credit and debit card numbers and 70 million sets of personal data. The breach occurred when attackers gained unauthorized access through compromised credentials from a third-party vendor, using RAM scraping malware to extract data from point-of-sale systems. This incident highlights significant security vulnerabilities in vendor management and network segmentation.

0012005-07-01

TJX Companies Inc. Data Breach

Prevented by: PEC, EGR

The TJX Companies Inc. data breach, discovered in January 2007 but originating in July 2005, compromised 94 million records, including credit card data and personal information such as driver’s license numbers. Attackers exploited outdated WEP encryption on TJX’s wireless networks, leading to a major security incident impacting numerous customers.

RSS feed for this tag →