Target says attackers stole vendor credentials
Target said Wednesday that intruders accessed its systems by using credentials "stolen" from a vendor, one of the first details the retailer has revealed about how hackers got inside.
The vendor was not identified. A Target spokeswoman said she had no further details to share.
As the forensic investigation continues, the spokeswoman said Target has taken measures to secure its network, such as updating access controls and in some cases, limiting access to its platforms. Up to 110 million payment cards and personal records were stolen between Nov. 27 and Dec. 15, when Target first confirmed it was the victim of a data breach. The company publicly announced the intrusion on Dec. 19.
