Attack via a supplier: Retail (shop), USA 2013
On 15 November 2013, the attackers entered the network of the department store chain using login data they had stolen from the service provider Fazio Mechanical Services.
- Incident · 11.2013 · USA
- Evidence: one media report
- Attack via a supplier
- Data breach
As of
What happened
Fazio carried out work on refrigeration, heating and air conditioning for Target and other retailers. According to Fazio, the access was used only for invoicing and project management, not for remote control of the refrigeration systems.
- Affected
- Target (entry via Fazio Mechanical Services)
- Industry
- Retail (shop)
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- no / no
- Data affected
- true
- Bankruptcy
- no
- Entry point
- Stolen login data of a refrigeration and air conditioning service provider
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Contractual penalties under PCI DSS for card payments
Mostly covered 4 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Access for refrigeration technicians and other service providers is a point of entry and needs separate, tightly restricted accounts.
Sources
- Target Hackers Broke in Via HVAC Company (opens in a new window) Krebs on Security · 2014-02-05
«refrigeration, heating and air conditioning subcontractor»