FORTUNE -- It took a group of cyber criminals 19 days to steal the personal information of 40 million people from Target's database, but it will take the retailer much longer to recover from the massive theft.
On Wednesday, security blogger Brian Krebs reported that Target (TGT) was investigating a security breach involving stolen credit and debit card information. The retailer confirmed Thursday that approximately 40 million in-store customers had their information comprised over a nearly three-week period that included the heavily trafficked shopping period surrounding Black Friday.
The value of the stolen personal information could be as much as $800 million depending on the extent of the criminals' underground network. The security breach represents one of the largest at a major retailer since 2007 when criminals stole card numbers and other data from as many as 90 million cards belonging to T.J. Maxx, HomeGoods, and other discount chains owned by parent-company TJX.
"Everyone thinks today that this happens because of hackers, but that is long gone," said Daniel Tobok, managing director of cybersecurity firm TELUS Security Solutions. "Now it has turned into highly sophisticated organized crime, which is very lucrative business."
Target's security breach demonstrates a devastating reality: Practically no consumer is safe from cyber attacks on their personal information. Target's information security group is one of the best in retail, and if a breach of this magnitude can affect them, it can really affect anyone, said Rodney Joffe, a cyber crime expert and senior vice president of information and analytics firm Neustar.
The discount retailer did not disclose how an attack of this magnitude infiltrated its servers, saying only that a third-party forensics firm is investigating the situation. It is likely that the criminals took advantage of Target's point-of-sale systems, Joffe said, which would allow them to create counterfeit cards and even withdraw money from customers' accounts.
With a greater volume of shoppers coming through its doors, the retailer was particularly vulnerable to an attack around Black Friday.
"Everybody is running around like chickens with their heads cut off and they are worried about business and not security," Tobok said. "The bad guys are smart. They know the best time to get in."
An individual's credit or debit card information could be worth as much as $20 on the black market. But it is highly unlikely that the criminals who organized the Target security breach will be able to capitalize on the information of all 40 million customers before the banks steps in and issue new cards on compromised accounts. As the U.S. Secret Service investigates the breach as well, Joffe estimates that the criminals will only get away with hundreds of thousands of dollars in fraudulent charges.
"It really is a race to see who is going to do what with the information first," Joffe said.
Target is likely to suffer the biggest loss from the attack. When TJX (TJX) was breached in 2007, it cost the retailer more than $100 million to cover the costs of the subsequent investigation, security system upgrades, customer communications, and legal fees.
Financial costs aside, the retailer's delayed response to, and acknowledgement of, the problem could have a lasting impact on its brand image. While the retailer did not disclose precisely when it became aware of the breach, it took more than three weeks after the first customer was compromised for Target to issue a statement.
"There is no way to hide it or hide from it and they need to be frank about it and what they are doing to improve," said Donna Arbietman, the founder of Drum Marketing Communications. "I would give as much information as possible on as many channels as possible without compromising future transactions."
As for the criminals, whether or not authorities catch them is moot, Joffe said.
"Even if they are caught, ultimately, that isn't going to make it safer for us and it won't make it any better for Target as a brand," Joffe said. "There is always someone who thinks they have a better way of attacking a system and not even get caught."
Clarification, December 20, 2013: The original version of this article understated the value of the fraudulent charges that the criminals responsible for the Target breach would get away with. It is hundreds of thousands of dollars, not $100,000.
Apple climbed $36.27 (7%) in three and a half days amid early signs of an iPad Christmas.
FORTUNE -- "I think it's going to be an iPad Christmas," Tim Cook told analysts last month, and it looks like he may be right.
Apple (AAPL) shares closed at 556.07 Friday, up $37.37 (7%) for the week amid signs that tablets were among the hottest sellers at the start of the 2013 holiday buying frenzy, MOREPhilip Elmer-DeWitt - Nov 30, 2013 11:07 AM ET
Some say collecting and remitting sales taxes would be too complicated and expensive for smaller businesses. But that doesn't seem to be the case.
FORTUNE -- Taxes on Internet sales have been talked about since the birth of e-commerce. In those early web days, one major objection was that taxes would be impossible to collect, given all the various local and state sales-tax regimes. Forcing merchants to adhere to the laws of MOREDan Mitchell, contributor - May 7, 2013 10:45 AM ET
Fortune 500 companies are looking at the big picture as they embrace social media.
By Colleen Leahey, reporter
FORTUNE -- About a year before Facebook bought the photo-sharing app Instagram for $1 billion, General Electric (GE) joined. Instagram users take and share pictures on their smartphones and "follow" other users' photostreams. GE (No. 6 on the Fortune 500) has 86,066 followers. Instagram's retro-filters can make GE's photos look like a history MOREMay 21, 2012 5:00 AM ET
The high-tech wundercompany landed not only on our street corners and in our malls, but also on the top 10 of Fortune's Most Admired Companies.
Editor's note: This article appeared in the March 8, 2007 issue of Fortune magazine.
By Jerry Useem
FORTUNE -- "Sorry Steve, Here's Why Apple Stores Won't Work," BusinessWeek wrote with great certainty in 2001. "It's desperation time in Cupertino, Calif.," opined TheStreet.com. "I give [Apple] two years MOREAug 26, 2011 5:00 AM ET
Ron Johnson, who came to Apple from Target, is headed back to his retail roots
Among the senior vice presidents on whom Steve Jobs depends to run Apple (AAPL), three stand out: Tim Cook, the master of Apple's supply chain; Jony Ive, its genius designer; and Ron Johnson, the man who built the Apple Store.
Jobs is reportedly losing one of them today. According to the Wall Street Journal, J.C. Penney (JCP) MOREPhilip Elmer-DeWitt - Jun 14, 2011 12:16 PM ET
By Sunday, Gene Munster's team couldn't find an Apple tablet for sale at any retail outlet
Gene Munster's team at Piper Jaffray walked the iPad 2 lines in New York City and Minneapolis and interviewed 236 would-be buyers. They also called various retailers (Apple stores, Target, Best Buy, etc.) looking for product. The results of their survey were released Sunday night. Their findings:
Munster is sticking with his estimate of 400,000 to MOREPhilip Elmer-DeWitt - Mar 13, 2011 8:39 PM ET
Verizon will throw in a MiFi mobile hotspot as part of its deal. Shades of iPhones to come?
Two big iPad announcements Thursday:
A press release from Apple (AAPL) announcing that starting Oct. 28, more than 2,200 AT&T (T) stores will begin selling Apple's Wi-Fi+3G iPads at the usual prices: $629 for 16GB, $729 for 32GB and $829 for 64GB. The data plans are unchanged: $14.99 per month for 250MB and $25 MOREPhilip Elmer-DeWitt - Oct 14, 2010 10:28 AM ET
With displays in BestBuy, Target and now Walmart, Apple is going for the holiday gift market
Walmart (WMT) confirmed late Monday what the rumor sites had been reporting since Friday: starting Oct. 15, it will begin selling iPads on a schedule that would put Apple's (AAPL) tablet computer in 2,300 Walmart stores by mid-November -- just in time for the holiday gift-buying season.
When you add Walmart to the 221 U.S. Apple MOREPhilip Elmer-DeWitt - Oct 12, 2010 7:41 AM ET
Apple is aggressively expanding the tablet's retail presence in time for the holidays
[UPDATE Oct. 9: Photos have surfaced on MacRumors suggesting that Walmart could begin selling iPads next week and could have them in 1,000 stores before the end of October.]
[UPDATE Oct. 4: As of Monday, the iPad is also available on Amazon. Click here for pricing.]
One way to track how rapidly Apple (AAPL) is building iPads is to watch MOREPhilip Elmer-DeWitt - Oct 9, 2010 11:00 AM ET
|The Deep Web you don't know about|
|Colorado gets $2 million from marijuana taxes|
|Pizza chain Sbarro files for bankruptcy|
|Invest $1 million, try for a U.S. green card|
|Shodan: The scariest search engine on the Internet|