3 ms·
The article mentions PIN numbers potentially being stolen as well, which is also supposed to never be stored, and used only during the process of authorization
by unoti 13y ago
The article mentions PIN numbers potentially being stolen as well, which is also supposed to never be stored, and used only during the process of authorization then discarded.
This leads me to conclude that either Target's software architecture is completely brain dead and they're storing PINs and CVV2's somewhere, or that the attack somehow managed to get insinuated into the credit card authorization process. As someone who has worked with credit cards for many years, as well as with high level people within both Target and Wal Mart, it's easier to believe the latter than the former.
- MrFoof 13y agoThe attack seemed to be malicious software on the POS systems themselves. So the data was likely stored out-of-band and sent to remote destinations owned by the attackers. http://www.nbcnews.com/technology/massive-target-credit-card-breach-new-step-security-war-hackers-2D11778083 http://www.nbcnews.com/technology/massive-target-credit-card... If so, that's an incredibly sophisticated attack considering the scope of the breach.