Indeed; while it might be more speculation that reality (the firm is not saying much, but see http://krebsonsecurity.com/2014/02/email-attack-on-vendor-set-up-b

Indeed; while it might be more speculation that reality (the firm is not saying much, but see http://krebsonsecurity.com/2014/02/email-attack-on-vendor-set-up-breach-at-target/ http://krebsonsecurity.com/2014/02/email-attack-on-vendor-se... for what it's worth), I remember reading that it was thought Target was compromised through the path they supplied to a refrigerator and freezer vendor, which they didn't properly segregate or otherwise manage. There's very strong use cases for this, e.g. those responsible for a store would much prefer being told quasi-immediately that a unit has failed instead of finding it full of ruined food when they arrive in the morning.