Case Study: Target Corporation's Data Breach - A Detailed Analysis

This assignment presents a case study on the Target Corporation data breach, analyzing the events that led to the security failure. The analysis focuses on the company's failure to heed warnings and the impact of disabling critical security systems. It explores the legal implications of the breach, hig...Read More

Response to a case study: Target Corporation
We all know what went on with Target retailers. More than seventy five million credit and debit
card information was stolen by hackers who accessed the information system of Target
Corporation. I was watching a video of what happened and based on the video it seems that
Target did allow for the data breach since it did not heed to the warning signs. Legally, this is a
major fault on the Target's part. Target should have reacted when it received the warnings. The
company had received warnings on its FireEye system that used to be on watch for such
intrusions. Legally Target should remain on watch for any such warning signs and inform the
appropriate authorities as soon as these signs are discovered. However, in the current case the
warning signs were discovered but never reported. In the current case really nothing was done to
help the situation and if anything was done it happened after the massive breach had taken place.
The important security features of the Fire Eye system had been turned off and the massive
breach occurred. The automated system that could have eradicated the malware had been turned
off and as a result a massive breach of around 46% of data had happened. This is a case of
personal identity theft and in this regard while the company should erect appropriate barriers, it
should also inform appropriate authorities immediately as soon as any such breach has been
identified.
From the Target Corporation incident, it is always a recommended practice for people to follow
due processes. Alarms are put in place for a reason. And if the alarms goes off and there is no
appropriate action taken, then there was no need to have the alarm system installed in the first
place. For large organizations it is advisable that they have an IT specialist on alert at all times.
The organization might feel like they are paying the IT guy for doing nothing, but incases of

emergencies, these people will help the organization avert the hefty fines and loses that would
otherwise befall the organization incase anything sinister takes place.